Update SSL error message for improper permissions. Backpatch to 7.3.X.

bmomjian · bmomjian · commit 572d95150eea · 2002-12-23T22:19:00.000Z
diff --git a/src/backend/libpq/be-secure.c b/src/backend/libpq/be-secure.c
@@ -11,7 +11,7 @@
  *
  *
  * IDENTIFICATION
- *	  $Header: /cvsroot/pgsql/src/backend/libpq/be-secure.c,v 1.20 2002/12/18 13:15:12 pgsql Exp $
+ *	  $Header: /cvsroot/pgsql/src/backend/libpq/be-secure.c,v 1.21 2002/12/23 22:19:00 momjian Exp $
  *
  *	  Since the server static private key ($DataDir/server.key)
  *	  will normally be stored unencrypted so that the database
@@ -616,7 +616,9 @@ initialize_SSL(void)
 		if (!S_ISREG(buf.st_mode) || (buf.st_mode & 0077) ||
 			buf.st_uid != getuid())
 		{
-			postmaster_error("bad permissions on private key file (%s)", fnbuf);
+			postmaster_error("bad permissions on private key file (%s)\n"
+"File must be owned by the proper user and must have no permissions for\n"
+"\"group\" or \"other\".", fnbuf);
 			ExitPostmaster(1);
 		}
 		if (!SSL_CTX_use_PrivateKey_file(SSL_context, fnbuf, SSL_FILETYPE_PEM))

Original file line number	Diff line number	Diff line change
`@@ -11,7 +11,7 @@`
`11`	`11`	`*`
`12`	`12`	`*`
`13`	`13`	`* IDENTIFICATION`
`14`		`- * $Header: /cvsroot/pgsql/src/backend/libpq/be-secure.c,v 1.20 2002/12/18 13:15:12 pgsql Exp $`
	`14`	`+ * $Header: /cvsroot/pgsql/src/backend/libpq/be-secure.c,v 1.21 2002/12/23 22:19:00 momjian Exp $`
`15`	`15`	`*`
`16`	`16`	`* Since the server static private key ($DataDir/server.key)`
`17`	`17`	`* will normally be stored unencrypted so that the database`
`@@ -616,7 +616,9 @@ initialize_SSL(void)`
`616`	`616`	`if (!S_ISREG(buf.st_mode) \|\| (buf.st_mode & 0077) \|\|`
`617`	`617`	`buf.st_uid != getuid())`
`618`	`618`	`{`
`619`		`- postmaster_error("bad permissions on private key file (%s)", fnbuf);`
	`619`	`+ postmaster_error("bad permissions on private key file (%s)\n"`
	`620`	`+"File must be owned by the proper user and must have no permissions for\n"`
	`621`	`+"\"group\" or \"other\".", fnbuf);`
`620`	`622`	`ExitPostmaster(1);`
`621`	`623`	`}`
`622`	`624`	`if (!SSL_CTX_use_PrivateKey_file(SSL_context, fnbuf, SSL_FILETYPE_PEM))`