From 7b8b0fdba02ab829870d1b60d997e577c225a7a8 Mon Sep 17 00:00:00 2001
From: "Simon J. Gerraty" <sjg@FreeBSD.org>
Date: Tue, 9 Apr 2019 22:20:11 +0000
Subject: [PATCH] Always report file with incorrect hash.

---
 lib/libsecureboot/verify_file.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/libsecureboot/verify_file.c b/lib/libsecureboot/verify_file.c
index 7754095149c1..369c0bb8eb37 100644
--- a/lib/libsecureboot/verify_file.c
+++ b/lib/libsecureboot/verify_file.c
@@ -366,7 +366,7 @@ verify_file(int fd, const char *filename, off_t off, int severity)
 			return (rc);
 		}
 
-		if (severity || verbose)
+		if (severity || verbose || rc == VE_FINGERPRINT_WRONG)
 			printf("Unverified: %s\n", ve_error_get());
 		if (rc == VE_FINGERPRINT_UNKNOWN && severity < VE_MUST)
 			rc = VE_UNVERIFIED_OK;