From: Timo Sirainen <tss@iki.fi>
Date: Thu, 3 Dec 2015 09:41:58 +0000 (+0200)
Subject: lib-ssl-iostream: Don't ignore errors on SSL certificate loading.
X-Git-Tag: 2.2.20.rc1~8
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=f82dcfb64fc65fe20e04b152ed425f32b6834078;p=thirdparty%2Fdovecot%2Fcore.git

lib-ssl-iostream: Don't ignore errors on SSL certificate loading.
Patch by Sebastiaan Hoogeveen.
---

diff --git a/src/lib-ssl-iostream/iostream-openssl-context.c b/src/lib-ssl-iostream/iostream-openssl-context.c
index 134b7fbe57..d01037589d 100644
--- a/src/lib-ssl-iostream/iostream-openssl-context.c
+++ b/src/lib-ssl-iostream/iostream-openssl-context.c
@@ -379,7 +379,7 @@ ssl_iostream_context_set(struct ssl_iostream_context *ctx,
 	}
 
 	if (set->cert != NULL &&
-	    ssl_ctx_use_certificate_chain(ctx->ssl_ctx, set->cert) < 0) {
+	    ssl_ctx_use_certificate_chain(ctx->ssl_ctx, set->cert) == 0) {
 		*error_r = t_strdup_printf("Can't load SSL certificate: %s",
 			ssl_iostream_get_use_certificate_error(set->cert));
 		return -1;