diff options
| author | Tom Lane <tgl@sss.pgh.pa.us> | 2006-05-12 22:44:36 +0000 |
|---|---|---|
| committer | Tom Lane <tgl@sss.pgh.pa.us> | 2006-05-12 22:44:36 +0000 |
| commit | 91d568e9bbcd2c60e6ca36b2e5ef5404dfec62f8 (patch) | |
| tree | 5a77cb75f19984f7f0b15f57adf790850a204a9f | |
| parent | 2246e31775b93fbeaf93dfc356dff62973784ee2 (diff) | |
| download | postgresql-91d568e9bbcd2c60e6ca36b2e5ef5404dfec62f8.tar.gz postgresql-91d568e9bbcd2c60e6ca36b2e5ef5404dfec62f8.zip | |
Fix the sense of the test on DH_check()'s return value. This was preventing
custom-generated DH parameters from actually being used by the server.
Found by Michael Fuhr.
| -rw-r--r-- | src/backend/libpq/be-secure.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/backend/libpq/be-secure.c b/src/backend/libpq/be-secure.c index 8a4def4e11a..022c4f0b69a 100644 --- a/src/backend/libpq/be-secure.c +++ b/src/backend/libpq/be-secure.c @@ -11,7 +11,7 @@ * * * IDENTIFICATION - * $PostgreSQL: pgsql/src/backend/libpq/be-secure.c,v 1.69 2006/05/06 02:24:39 momjian Exp $ + * $PostgreSQL: pgsql/src/backend/libpq/be-secure.c,v 1.70 2006/05/12 22:44:36 tgl Exp $ * * Since the server static private key ($DataDir/server.key) * will normally be stored unencrypted so that the database @@ -524,7 +524,7 @@ load_dh_file(int keylength) /* make sure the DH parameters are usable */ if (dh != NULL) { - if (DH_check(dh, &codes)) + if (DH_check(dh, &codes) == 0) { elog(LOG, "DH_check error (%s): %s", fnbuf, SSLerrmessage()); return NULL; |