IntenseWebs/pgadmin4
3
0
Fork 0
mirror of https://github.com/pgadmin-org/pgadmin4.git synced 2024-11-21 16:27:39 -06:00
Code Issues Packages Projects Releases Wiki Activity

Ensure that the appropriate permissions are set on the key file before trying an SSL connection with the server in server mode. #5424

Browse Source
This commit is contained in:
Yogesh Mahajan 2022-10-31 17:59:31 +05:30 committed by GitHub
parent 201a27e4b3
commit 5e98bf96bc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
web/pgadmin/utils/driver/psycopg2/connection.py
View File

@ -315,6 +315,14 @@ class Connection(BaseConnection):
os.environ['PGAPPNAME'] = '{0} - {1}'.format( os.environ['PGAPPNAME'] = '{0} - {1}'.format(
config.APP_NAME, conn_id) config.APP_NAME, conn_id)
ssl_key = get_complete_file_path(manager.sslkey)
if ssl_key and manager.ssl_mode in \
['require', 'verify-ca', 'verify-full']:
ssl_key_file_permission = \
int(oct(os.stat(ssl_key).st_mode)[-3:])
if ssl_key_file_permission > 600:
os.chmod(ssl_key, 0o600)
with ConnectionLocker(manager.kerberos_conn): with ConnectionLocker(manager.kerberos_conn):
pg_conn = psycopg2.connect( pg_conn = psycopg2.connect(
host=manager.local_bind_host if manager.use_ssh_tunnel host=manager.local_bind_host if manager.use_ssh_tunnel
@ -330,7 +338,7 @@ class Connection(BaseConnection):
passfile=get_complete_file_path(passfile), passfile=get_complete_file_path(passfile),
sslmode=manager.ssl_mode, sslmode=manager.ssl_mode,
sslcert=get_complete_file_path(manager.sslcert), sslcert=get_complete_file_path(manager.sslcert),
sslkey=get_complete_file_path(manager.sslkey), sslkey=ssl_key,
sslrootcert=get_complete_file_path(manager.sslrootcert), sslrootcert=get_complete_file_path(manager.sslrootcert),
sslcrl=get_complete_file_path(manager.sslcrl), sslcrl=get_complete_file_path(manager.sslcrl),
sslcompression=True if manager.sslcompression else False, sslcompression=True if manager.sslcompression else False,