Update SSL error message for improper permissions. Backpatch to 7.3.X.

diff --git a/src/backend/libpq/be-secure.c b/src/backend/libpq/be-secure.c
index 72c14294ae3d708af0c6fec62f84ade6c37f596f..be9897d4566559690f96c74591e8242b30261312 100644 (file)
--- a/src/backend/libpq/be-secure.c
+++ b/src/backend/libpq/be-secure.c
@@ -616,7 +616,9 @@ initialize_SSL(void)
                if (!S_ISREG(buf.st_mode) || (buf.st_mode & 0077) ||
                        buf.st_uid != getuid())
                {
-                       postmaster_error("bad permissions on private key file (%s)", fnbuf);
+                       postmaster_error("bad permissions on private key file (%s)\n"
+"File must be owned by the proper user and must have no permissions for\n"
+"\"group\" or \"other\".", fnbuf);
                        ExitPostmaster(1);
                }
                if (!SSL_CTX_use_PrivateKey_file(SSL_context, fnbuf, SSL_FILETYPE_PEM))