From 49d837de532e2cb3d21497248d1f834909035602 Mon Sep 17 00:00:00 2001
From: Timothe Litt <litt@acm.org>
Date: Mon, 15 May 2017 14:40:18 -0400
Subject: [PATCH] Improve message from curl error code 60

Issue #288
---
 getssl | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/getssl b/getssl
index 7f3713e..5bce35c 100755
--- a/getssl
+++ b/getssl
@@ -429,7 +429,8 @@ check_getssl_upgrade() { # check if a more recent version of code is available a
   curl --silent "$CODE_LOCATION" --output "$TEMP_UPGRADE_FILE"
   errcode=$?
   if [[ $errcode -eq 60 ]]; then
-    error_exit "curl needs updating, your version does not support SNI (multiple SSL domains on a single IP)"
+    longmsg=$'Can not authenticate SSL peer. Your ca_bundle.crt and/or curl may need\nupdating. ca_bundle.crt can be updates with mk-ca-bundle.  Curl should\nsupport SNI (multiple SSL domains on a single IP)'
+    error_exit "$longmsg"
   elif [[ $errcode -gt 0 ]]; then
     error_exit "curl error : $errcode"
   fi