|
135 | 135 | ||die"copying server.crt:$!";
|
136 | 136 | copy"$certdir/server-cn-only.key","$pgdata/server.key"
|
137 | 137 | ||die"copying server.key:$!";
|
138 |
| -chmod(0600,"$pgdata/server.key"); |
| 138 | +chmod(0600,"$pgdata/server.key") |
| 139 | +ordie"failed to change permissions on server keys:$!"; |
139 | 140 |
|
140 | 141 | # Start with SSL disabled.
|
141 | 142 | $node->append_conf('postgresql.conf',"ssl = off\n");
|
@@ -181,7 +182,7 @@ BEGIN
|
181 | 182 |
|
182 | 183 | # Only accept SSL connections from $servercidr. Our tests don't depend on this
|
183 | 184 | # but seems best to keep it as narrow as possible for security reasons.
|
184 |
| -openmy$hba,'>',"$pgdata/pg_hba.conf"; |
| 185 | +openmy$hba,'>',"$pgdata/pg_hba.conf"ordie$!; |
185 | 186 | print$hbaqq{
|
186 | 187 | # TYPE DATABASE USER ADDRESS METHOD OPTIONS
|
187 | 188 | local postgres localuser trust
|
|