Go over all OpenSSL return values and make sure we compare them

to the documented API value. The previous code got it right as
it's implemented, but accepted too much/too little compared to
the API documentation.

Per comment from Zdenek Kotala.

diff --git a/src/backend/libpq/be-secure.c b/src/backend/libpq/be-secure.c
index 923ad6bcb3daea346d3f9d8661df7d85c3eabdc9..b3d00746eb9c195b2815968bf3181ca5148aec76 100644 (file)
--- a/src/backend/libpq/be-secure.c
+++ b/src/backend/libpq/be-secure.c
@@ -11,7 +11,7 @@
  *
  *
  * IDENTIFICATION
- *   $PostgreSQL: pgsql/src/backend/libpq/be-secure.c,v 1.83 2008/01/01 19:45:49 momjian Exp $
+ *   $PostgreSQL: pgsql/src/backend/libpq/be-secure.c,v 1.83.2.1 2009/01/28 15:06:57 mha Exp $
  *
  *   Since the server static private key ($DataDir/server.key)
  *   will normally be stored unencrypted so that the database
@@ -727,9 +727,9 @@ initialize_SSL(void)
        /*
         * Load and verify certificate and private key
         */
-       if (!SSL_CTX_use_certificate_file(SSL_context,
+       if (SSL_CTX_use_certificate_file(SSL_context,
                                          SERVER_CERT_FILE,
-                                         SSL_FILETYPE_PEM))
+                                         SSL_FILETYPE_PEM) != 1)
            ereport(FATAL,
                    (errcode(ERRCODE_CONFIG_FILE_ERROR),
                  errmsg("could not load server certificate file \"%s\": %s",
@@ -759,14 +759,14 @@ initialize_SSL(void)
                     errdetail("File must be owned by the database user and must have no permissions for \"group\" or \"other\".")));
 #endif
 
-       if (!SSL_CTX_use_PrivateKey_file(SSL_context,
+       if (SSL_CTX_use_PrivateKey_file(SSL_context,
                                         SERVER_PRIVATE_KEY_FILE,
-                                        SSL_FILETYPE_PEM))
+                                        SSL_FILETYPE_PEM) != 1)
            ereport(FATAL,
                    (errmsg("could not load private key file \"%s\": %s",
                            SERVER_PRIVATE_KEY_FILE, SSLerrmessage())));
 
-       if (!SSL_CTX_check_private_key(SSL_context))
+       if (SSL_CTX_check_private_key(SSL_context) != 1)
            ereport(FATAL,
                    (errmsg("check of private key failed: %s",
                            SSLerrmessage())));
@@ -783,7 +783,7 @@ initialize_SSL(void)
    /*
     * Require and check client certificates only if we have a root.crt file.
     */
-   if (!SSL_CTX_load_verify_locations(SSL_context, ROOT_CERT_FILE, NULL))
+   if (SSL_CTX_load_verify_locations(SSL_context, ROOT_CERT_FILE, NULL) != 1)
    {
        /* Not fatal - we do not require client certificates */
        ereport(LOG,
@@ -803,7 +803,7 @@ initialize_SSL(void)
        if (cvstore)
        {
            /* Set the flags to check against the complete CRL chain */
-           if (X509_STORE_load_locations(cvstore, ROOT_CRL_FILE, NULL) != 0)
+           if (X509_STORE_load_locations(cvstore, ROOT_CRL_FILE, NULL) == 1)
 /* OpenSSL 0.96 does not support X509_V_FLAG_CRL_CHECK */
 #ifdef X509_V_FLAG_CRL_CHECK
                X509_STORE_set_flags(cvstore,

diff --git a/src/interfaces/libpq/fe-secure.c b/src/interfaces/libpq/fe-secure.c
index 10bd938981d8e78e5c74b07b168e53a0ad788a49..af919a8333e806cc2c62c2c08ebd1a9efb7fb9ae 100644 (file)
--- a/src/interfaces/libpq/fe-secure.c
+++ b/src/interfaces/libpq/fe-secure.c
@@ -11,7 +11,7 @@
  *
  *
  * IDENTIFICATION
- *   $PostgreSQL: pgsql/src/interfaces/libpq/fe-secure.c,v 1.102 2008/01/29 02:03:39 tgl Exp $
+ *   $PostgreSQL: pgsql/src/interfaces/libpq/fe-secure.c,v 1.102.2.1 2009/01/28 15:06:57 mha Exp $
  *
  * NOTES
  *   [ Most of these notes are wrong/obsolete, but perhaps not all ]
@@ -793,7 +793,7 @@ client_cert_cb(SSL *ssl, X509 **x509, EVP_PKEY **pkey)
    }
 
    /* verify that the cert and key go together */
-   if (!X509_check_private_key(*x509, *pkey))
+   if (X509_check_private_key(*x509, *pkey) != 1)
    {
        char       *err = SSLerrmessage();
 
@@ -926,7 +926,7 @@ initialize_SSL(PGconn *conn)
        {
            X509_STORE *cvstore;
 
-           if (!SSL_CTX_load_verify_locations(SSL_context, fnbuf, NULL))
+           if (SSL_CTX_load_verify_locations(SSL_context, fnbuf, NULL) != 1)
            {
                char       *err = SSLerrmessage();
 
@@ -940,7 +940,7 @@ initialize_SSL(PGconn *conn)
            if ((cvstore = SSL_CTX_get_cert_store(SSL_context)) != NULL)
            {
                /* setting the flags to check against the complete CRL chain */
-               if (X509_STORE_load_locations(cvstore, ROOT_CRL_FILE, NULL) != 0)
+               if (X509_STORE_load_locations(cvstore, ROOT_CRL_FILE, NULL) == 1)
 /* OpenSSL 0.96 does not support X509_V_FLAG_CRL_CHECK */
 #ifdef X509_V_FLAG_CRL_CHECK
                    X509_STORE_set_flags(cvstore,