More verbose SPKI hash

diff --git a/internal/cert.go b/internal/cert.go
index 2760cc7258aa0ed6f6834b1befff7c6eaa108f9b..d4502507dca0b44e646e9106bb4135cdd26944db 100644 (file)
--- a/internal/cert.go
+++ b/internal/cert.go
@@ -20,7 +20,7 @@ import (
        "crypto/sha256"
        "crypto/x509"
        "encoding/hex"
-       "errors"
+       "fmt"
 )
 
 func NewVerifyPeerCertificate(hashExpected string) func(
@@ -36,7 +36,8 @@ func NewVerifyPeerCertificate(hashExpected string) func(
                spki := cer.RawSubjectPublicKeyInfo
                hsh := sha256.Sum256(spki)
                if hashExpected != hex.EncodeToString(hsh[:]) {
-                       return errors.New("server certificate's SPKI hash mismatch")
+                       return fmt.Errorf("server certificate's SPKI hash mismatch: %s != %s",
+                               hashExpected, hex.EncodeToString(hsh[:]))
                }
                return nil
        }