From 4eb18bd6b72eeae5f27190fafa99b791df3a0780 Mon Sep 17 00:00:00 2001
From: Marc Hartmayer <marc@linux.ibm.com>
Date: Fri, 3 Jul 2026 14:36:12 +0200
Subject: [PATCH] pv: download_first_crl_from_x509: Log errors
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Although most errors are ignored and the next CRL distribution point is
tried, log the errors as debug messages.

Signed-off-by: Marc Hartmayer <marc@linux.ibm.com>
Reviewed-by: Steffen Eiden <seiden@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
---
 rust/pv/src/verify/helper.rs | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/rust/pv/src/verify/helper.rs b/rust/pv/src/verify/helper.rs
index 26957670..12f3aca3 100644
--- a/rust/pv/src/verify/helper.rs
+++ b/rust/pv/src/verify/helper.rs
@@ -331,7 +331,8 @@ pub fn download_first_crl_from_x509(cert: &X509Ref) -> Result<Option<Vec<openssl
         handle.timeout(CRL_TIMEOUT_MAX)?;
         handle.useragent("s390-tools-pv-crl")?;
 
-        if handle.perform().is_err() {
+        if let Err(err) = handle.perform() {
+            debug!("Failed to download CRL: {}", err);
             continue;
         }
         match read_crls(&handle.get_ref().0) {