1 files changed, 7 insertions, 4 deletions

diff --git a/src/lib/libtls/tls_keypair.c b/src/lib/libtls/tls_keypair.c
index a12d21d0da..ffda91df8e 100644
--- a/src/lib/libtls/tls_keypair.c
+++ b/src/lib/libtls/tls_keypair.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: tls_keypair.c,v 1.8 2021/01/05 17:37:12 jsing Exp $ */
+/* $OpenBSD: tls_keypair.c,v 1.9 2024/03/26 06:24:52 joshua Exp $ */
 /*
  * Copyright (c) 2014 Joel Sing <jsing@openbsd.org>
  *
@@ -144,19 +144,22 @@ tls_keypair_load_cert(struct tls_keypair *keypair, struct tls_error *error,
         *cert = NULL;
 
         if (keypair->cert_mem == NULL) {
-                tls_error_set(error, "keypair has no certificate");
+                tls_error_set(error, TLS_ERROR_UNKNOWN,
+                    "keypair has no certificate");
                 goto err;
         }
         if ((cert_bio = BIO_new_mem_buf(keypair->cert_mem,
             keypair->cert_len)) == NULL) {
-                tls_error_set(error, "failed to create certificate bio");
+                tls_error_set(error, TLS_ERROR_UNKNOWN,
+                    "failed to create certificate bio");
                 goto err;
         }
         if ((*cert = PEM_read_bio_X509(cert_bio, NULL, tls_password_cb,
             NULL)) == NULL) {
                 if ((ssl_err = ERR_peek_error()) != 0)
                         errstr = ERR_error_string(ssl_err, NULL);
-                tls_error_set(error, "failed to load certificate: %s", errstr);
+                tls_error_set(error, TLS_ERROR_UNKNOWN,
+                    "failed to load certificate: %s", errstr);
                 goto err;
         }