Include attestation object in cert path validation failure logs

Author: emlun

NEWS

@@ -1,5 +1,10 @@
 == Version 2.1.0 (unreleased) ==
 
+Changes:
+
+* Log messages on attestation certificate path validation failure now include
+  the attestation object.
+
 Fixes:
 
 * Fixed various typos and mistakes in JavaDocs.

webauthn-server-core/src/main/java/com/yubico/webauthn/FinishRegistrationSteps.java

@@ -543,14 +543,18 @@ public boolean attestationTrusted() {
 
         } catch (CertPathValidatorException e) {
           log.info(
-              "Failed to derive trust in attestation statement: {} at cert index {}: {}",
+              "Failed to derive trust in attestation statement: {} at cert index {}: {}. Attestation object: {}",
+              response.getResponse().getAttestationObject(),
               e.getReason(),
               e.getIndex(),
               e.getMessage());
           return false;
 
         } catch (CertificateException e) {
-          log.warn("Failed to build attestation certificate path.", e);
+          log.warn(
+              "Failed to build attestation certificate path. Attestation object: {}",
+              response.getResponse().getAttestationObject(),
+              e);
           return false;
 
         } catch (NoSuchAlgorithmException e) {