database/postgres
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2025-11-26 23:43:30 +03:00
Code Activity

Fix the sense of the test on DH_check()'s return value. This was preventing

Browse Source 
custom-generated DH parameters from actually being used by the server.
Found by Michael Fuhr.
This commit is contained in:
Tom Lane
2006-05-12 22:45:06 +00:00
parent 76dc24091f
commit 506747337b
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/backend/libpq/be-secure.c
View File

@@ -11,7 +11,7 @@
*
*
* IDENTIFICATION
* $Header: /cvsroot/pgsql/src/backend/libpq/be-secure.c,v 1.15.2.13 2005/06/02 21:04:29 tgl Exp $
* $Header: /cvsroot/pgsql/src/backend/libpq/be-secure.c,v 1.15.2.14 2006/05/12 22:45:06 tgl Exp $
*
* Since the server static private key ($DataDir/server.key)
* will normally be stored unencrypted so that the database
@@ -501,7 +501,7 @@ load_dh_file(int keylength)
/* make sure the DH parameters are usable */
if (dh != NULL)
{
if (DH_check(dh, &codes))
if (DH_check(dh, &codes) == 0)
{
elog(LOG, "DH_check error (%s): %s", fnbuf, SSLerrmessage());
return NULL;