From aa4f841d7c3863fdd9cc9ffa337d208183511b80 Mon Sep 17 00:00:00 2001 From: Maxim Motyshen Date: Sat, 21 Feb 2026 19:34:28 +0300 Subject: [PATCH] fix returning wrong error in configTLS when DecryptPEMBlock fails --- pgconn/config.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pgconn/config.go b/pgconn/config.go index d61187bd6..cb636fead 100644 --- a/pgconn/config.go +++ b/pgconn/config.go @@ -844,7 +844,7 @@ func configTLS(settings map[string]string, thisHost string, parseConfigOptions P decryptedKey, decryptedError = x509.DecryptPEMBlock(block, []byte(sslpassword)) // Should we also provide warning for PKCS#1 needed? if decryptedError != nil { - return nil, fmt.Errorf("unable to decrypt key: %w", err) + return nil, fmt.Errorf("unable to decrypt key: %w", decryptedError) } pemBytes := pem.Block{