Postgres Pro
Downloads
Home   >   mailing lists

Re: DH_check return value test correct? - Mailing list pgsql-hackers

From Tom Lane
Subject Re: DH_check return value test correct?
Date
Msg-id 24012.1147473584@sss.pgh.pa.us
Whole thread Raw
In response to DH_check return value test correct?  (Michael Fuhr <mike@fuhr.org>)
Responses Re: DH_check return value test correct?
List pgsql-hackers
Tree view 
Michael Fuhr <mike@fuhr.org> writes:
> Isn't that the wrong test for DH_check's return value?

Yeah, sure looks that way, doesn't it?

> If $PGDATA/dh1024.pem exists and if SSL connections are enabled,
> then each SSL connection logs the following:
>   DH_check error (dh1024.pem): No SSL error reported
> The backend then loads the hardcoded parameters.  The SSL connection
> works, but with DH parameters other than intended.

So it's not that surprising that no one noticed it was broken :-(
        regards, tom lane

pgsql-hackers by date:

Previous
From: Albert Cervera Areny
Date:
Subject: Re: Inheritance, Primary Keys and Foreign Keys
Next
From: Tom Lane
Date:
Subject: Re: audit table containing Select statements submitted