summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMagnus Hagander2009-05-11 08:06:21 +0000
committerMagnus Hagander2009-05-11 08:06:21 +0000
commit83c0bd8948074bf55bcf844b07bf4d374bffd792 (patch)
treef6a94bd0d42a864d9cc649b76ea0d007b3ae35b9
parent49f9b7e11686744b108b56642c6e53d99072643a (diff)
Support SSL certificate chains in the server certificate file.
Andrew Gierth
-rw-r--r--src/backend/libpq/be-secure.c5
1 files changed, 2 insertions, 3 deletions
diff --git a/src/backend/libpq/be-secure.c b/src/backend/libpq/be-secure.c
index 44575e3591..a0946dcbb2 100644
--- a/src/backend/libpq/be-secure.c
+++ b/src/backend/libpq/be-secure.c
@@ -729,9 +729,8 @@ initialize_SSL(void)
/*
* Load and verify certificate and private key
*/
- if (SSL_CTX_use_certificate_file(SSL_context,
- SERVER_CERT_FILE,
- SSL_FILETYPE_PEM) != 1)
+ if (SSL_CTX_use_certificate_chain_file(SSL_context,
+ SERVER_CERT_FILE) != 1)
ereport(FATAL,
(errcode(ERRCODE_CONFIG_FILE_ERROR),
errmsg("could not load server certificate file \"%s\": %s",