result = "GENEROUS";
else
/* client verification failed */
result = apr_psprintf(p, "FAILED:%s", verr);
result = apr_psprintf(p, "FAILED:%s", verr ? verr : X509_verify_cert_error_string(vrc));
if (xs)
X509_free(xs);