From f9379dc6bb9d2dbdc280b99604ce0520f9b426ec Mon Sep 17 00:00:00 2001
From: Nick Couchman <nick_couchman@cotyinc.com>
Date: Mon, 25 Jun 2018 08:31:00 -0400
Subject: [PATCH] GUACAMOLE-527: Get full error message when key verification
 fails.

---
 src/common-ssh/key.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/common-ssh/key.c b/src/common-ssh/key.c
index b7c73f08..4d569db7 100644
--- a/src/common-ssh/key.c
+++ b/src/common-ssh/key.c
@@ -277,8 +277,10 @@ int guac_common_ssh_verify_host_key(LIBSSH2_SESSION* session, guac_client* clien
     /* If there's an error provided, abort connection and return that. */
     if (known_hosts < 0) {
 
+        char* errmsg;
+        int errval = libssh2_session_last_error(session, &errmsg, NULL, 0);
         guac_client_log(client, GUAC_LOG_ERROR,
-            "Failure trying to load SSH host keys.");
+            "Error %d trying to load SSH host keys: %s", errval, errmsg);
 
         libssh2_knownhost_free(ssh_known_hosts);
         return known_hosts;