Expose context errors in pkinit_server_plugin_init Commit 3ff426b9048a8024e5c175256c63cd0ad0572320 attempted to display an error when OCSP support was requested, but this error message was suppressed in pkinit_server_plugin_init(). Add a trace log for each realm initialization error, and pass through the realm initialization error when the KDC serves only one realm. Other error messages from pkinit_init_kdc_profile(), such as missing pkinit_identity or pkinit_anchors, are also now exposted. [ghudson@mit.edu: clarified commit message] (cherry picked from commit 225aab3540c13c6289b22022d5e110f6fc26151d) https://github.com/krb5/krb5/commit/96bbaedd6e665b67ef89452e3cc84bc36f7860dc Author: Robbie Harwood Committer: Greg Hudson Commit: 96bbaedd6e665b67ef89452e3cc84bc36f7860dc Branch: krb5-1.16 src/plugins/preauth/pkinit/pkinit_srv.c | 19 +++++++++++++------ src/plugins/preauth/pkinit/pkinit_trace.h | 3 +++ 2 files changed, 16 insertions(+), 6 deletions(-)