From 83c0bd8948074bf55bcf844b07bf4d374bffd792 Mon Sep 17 00:00:00 2001 From: Magnus Hagander Date: Mon, 11 May 2009 08:06:21 +0000 Subject: [PATCH] Support SSL certificate chains in the server certificate file. Andrew Gierth --- src/backend/libpq/be-secure.c | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/src/backend/libpq/be-secure.c b/src/backend/libpq/be-secure.c index 44575e3591..a0946dcbb2 100644 --- a/src/backend/libpq/be-secure.c +++ b/src/backend/libpq/be-secure.c @@ -729,9 +729,8 @@ initialize_SSL(void) /* * Load and verify certificate and private key */ - if (SSL_CTX_use_certificate_file(SSL_context, - SERVER_CERT_FILE, - SSL_FILETYPE_PEM) != 1) + if (SSL_CTX_use_certificate_chain_file(SSL_context, + SERVER_CERT_FILE) != 1) ereport(FATAL, (errcode(ERRCODE_CONFIG_FILE_ERROR), errmsg("could not load server certificate file \"%s\": %s", -- 2.30.2