Re: BUG #5468: Pg doesn't send accepted root CA list to client during SSL client cert request

Craig Ringer <craig@postnewspapers.com.au> writes:
> +         SSL_CTX_set_client_CA_list( SSL_context, SSL_load_client_CA_file(ROOT_CERT_FILE) );

Hmm, what about failures?  If we're loading the root cert file a second
time, it's possible that the user just changed it and the load now fails
for some reason.

            regards, tom lane