Skip site navigation (1) Skip section navigation (2)

pgsql: In initialize_SSL,don't fail unnecessarily when home dir is una

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: pgsql-committers(at)postgresql(dot)org
Subject: pgsql: In initialize_SSL,don't fail unnecessarily when home dir is una
Date: 2011-03-04 16:40:00
Message-ID: (view raw, whole thread or download thread mbox)
Lists: pgsql-committers
In initialize_SSL, don't fail unnecessarily when home dir is unavailable.

Instead, just act as though the certificate file(s) are not present.
There is only one case where this need be a hard failure condition: when
sslmode is verify-ca or verify-full, not having a root cert file is an
error.  Change the logic so that we complain only in that case, and
otherwise fall through cleanly.  This is how it used to behave pre-9.0,
but my patch 4ed4b6c54e5fab24ab2624d80e26f7546edc88ad of 2010-05-26 broke
the case.  Per report from Christian Kastner.



Modified Files
src/interfaces/libpq/fe-secure.c |   64 ++++++++++++++++++++++++-------------
1 files changed, 41 insertions(+), 23 deletions(-)

pgsql-committers by date

Next:From: Peter EisentrautDate: 2011-03-04 20:16:08
Subject: pgsql: When creating a collation, check that the locales can be loaded
Previous:From: Heikki LinnakangasDate: 2011-03-04 13:51:14
Subject: pgsql: You must hold a lock on the heap page when you call

Privacy Policy | About PostgreSQL
Copyright © 1996-2017 The PostgreSQL Global Development Group