From 741d368732dc25bb9fc40f8d72829c03cc170ac3 Mon Sep 17 00:00:00 2001 From: Tom Lane Date: Fri, 12 May 2006 22:44:58 +0000 Subject: [PATCH] Fix the sense of the test on DH_check()'s return value. This was preventing custom-generated DH parameters from actually being used by the server. Found by Michael Fuhr. --- src/backend/libpq/be-secure.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/backend/libpq/be-secure.c b/src/backend/libpq/be-secure.c index 44801269a0..2af8698513 100644 --- a/src/backend/libpq/be-secure.c +++ b/src/backend/libpq/be-secure.c @@ -505,7 +505,7 @@ load_dh_file(int keylength) /* make sure the DH parameters are usable */ if (dh != NULL) { - if (DH_check(dh, &codes)) + if (DH_check(dh, &codes) == 0) { elog(LOG, "DH_check error (%s): %s", fnbuf, SSLerrmessage()); return NULL; -- 2.39.5