Improve detection and logging of weak md error FAQ hint

1 files changed, 7 insertions, 1 deletions

diff --git a/main/src/main/java/de/blinkt/openvpn/core/VpnStatus.java b/main/src/main/java/de/blinkt/openvpn/core/VpnStatus.java
index e325f8b7..04848f93 100644
--- a/main/src/main/java/de/blinkt/openvpn/core/VpnStatus.java
+++ b/main/src/main/java/de/blinkt/openvpn/core/VpnStatus.java
@@ -469,11 +469,17 @@ public class VpnStatus {
     }
 
     public static void logMessageOpenVPN(LogLevel level, int ovpnlevel, String message) {
+        /* Check for the weak md whe we have a message from OpenVPN */
         newLogItem(new LogItem(level, ovpnlevel, message));
-
     }
 
 
+    public static void checkWeakMD(String msg) {
+        if ((msg.endsWith("md too weak") && msg.startsWith("OpenSSL: error")) || msg.contains("error:140AB18E")
+                || msg.contains("SSL_CA_MD_TOO_WEAK") || (msg.contains("ca md too weak")))
+            logError("OpenSSL reported a certificate with a weak hash, please see the in app FAQ about weak hashes.");
+    }
+
     public static synchronized void updateByteCount(long in, long out) {
         TrafficHistory.LastDiff diff = trafficHistory.add(in, out);