lib-ssl-iostream: Don't ignore errors on SSL certificate loading.

Patch by Sebastiaan Hoogeveen.

diff --git a/src/lib-ssl-iostream/iostream-openssl-context.c b/src/lib-ssl-iostream/iostream-openssl-context.c
index 134b7fbe57ccfb90d413e6477f260471c94ee2ec..d01037589d8a69da193d3f44181635dd9a3fb398 100644 (file)
--- a/src/lib-ssl-iostream/iostream-openssl-context.c
+++ b/src/lib-ssl-iostream/iostream-openssl-context.c
@@ -379,7 +379,7 @@ ssl_iostream_context_set(struct ssl_iostream_context *ctx,
        }
 
        if (set->cert != NULL &&
-           ssl_ctx_use_certificate_chain(ctx->ssl_ctx, set->cert) < 0) {
+           ssl_ctx_use_certificate_chain(ctx->ssl_ctx, set->cert) == 0) {
                *error_r = t_strdup_printf("Can't load SSL certificate: %s",
                        ssl_iostream_get_use_certificate_error(set->cert));
                return -1;