schannel: add failf calls for client certificate failures

Closes #2604

diff --git a/lib/vtls/schannel.c b/lib/vtls/schannel.c
index edc2459b77af92e398135b7266acdf1845143185..c50fd223a0c56493a5ce3c6d8ba0d35cc23d1fce 100644 (file)
--- a/lib/vtls/schannel.c
+++ b/lib/vtls/schannel.c
@@ -439,6 +439,8 @@ schannel_connect_step1(struct connectdata *conn, int sockindex)
       result = get_cert_location(cert_path, &cert_store_name,
                                  &cert_store_path, &cert_thumbprint_str);
       if(result != CURLE_OK) {
+        failf(data, "schannel: Failed to get certificate location for %s",
+              cert_path);
         Curl_unicodefree(cert_path);
         return result;
       }
@@ -447,6 +449,8 @@ schannel_connect_step1(struct connectdata *conn, int sockindex)
                                  (HCRYPTPROV)NULL,
                                  cert_store_name, cert_store_path);
       if(!cert_store) {
+        failf(data, "schannel: Failed to open cert store %s %s",
+              cert_store_name, cert_store_path);
         Curl_unicodefree(cert_path);
         return CURLE_SSL_CONNECT_ERROR;
       }