Update main.go (#1812)

Add logging for the client certificate verification.
googleforgames · Sep 14, 2020 · 23b60be · 23b60be
1 parent 6fe2a74
commit 23b60be
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/cmd/allocator/main.go b/cmd/allocator/main.go
@@ -295,13 +295,15 @@ func (h *serviceHandler) verifyClientCertificate(rawCerts [][]byte, verifiedChai
 
 	c, err := x509.ParseCertificate(rawCerts[0])
 	if err != nil {
+		logger.WithError(err).Warning("cannot parse client certificate")
 		return errors.New("bad client certificate: " + err.Error())
 	}
 
 	h.certMutex.RLock()
 	defer h.certMutex.RUnlock()
 	_, err = c.Verify(opts)
 	if err != nil {
+		logger.WithError(err).Warning("failed to verify client certificate")
 		return errors.New("failed to verify client certificate: " + err.Error())
 	}
 	return nil