diff options
| -rw-r--r-- | src/backend/libpq/be-secure-openssl.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/backend/libpq/be-secure-openssl.c b/src/backend/libpq/be-secure-openssl.c index a65f920343c..42c5c07e580 100644 --- a/src/backend/libpq/be-secure-openssl.c +++ b/src/backend/libpq/be-secure-openssl.c @@ -226,12 +226,14 @@ be_tls_init(bool isServerStart) * as the code above would have already generated an error. */ if (ssl_ver_min > ssl_ver_max) + { ereport(isServerStart ? FATAL : LOG, (errmsg("could not set SSL protocol version range"), errdetail("\"%s\" cannot be higher than \"%s\"", "ssl_min_protocol_version", "ssl_max_protocol_version"))); - goto error; + goto error; + } } /* disallow SSL session tickets */ |