Skip to content

Commit 5817673

Browse files
committed
Better document libpq sslverify behavior as requiring root.crt.
1 parent ebac30e commit 5817673

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

doc/src/sgml/libpq.sgml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
<!-- $PostgreSQL: pgsql/doc/src/sgml/libpq.sgml,v 1.281 2009/03/31 01:41:27 tgl Exp $ -->
1+
<!-- $PostgreSQL: pgsql/doc/src/sgml/libpq.sgml,v 1.282 2009/04/11 12:27:53 momjian Exp $ -->
22

33
<chapter id="libpq">
44
<title><application>libpq</application> - C Library</title>
@@ -6131,9 +6131,9 @@ myEventProc(PGEventId evtId, void *evtInfo, void *passThrough)
61316131

61326132
<para>
61336133
When the <literal>sslverify</> parameter is set to <literal>cn</> or
6134-
<literal>cert</>, libpq will verify that the server certificate is
6135-
trustworthy by checking the certificate chain up to a <acronym>CA</>.
6136-
For this to work, place the certificate of a trusted <acronym>CA</>
6134+
<literal>cert</>, libpq requires a trustworthy server certificate by
6135+
checking the certificate chain up to a <acronym>CA</>.
6136+
To allow verification, place the certificate of a trusted <acronym>CA</>
61376137
in the file <filename>~/.postgresql/root.crt</> in the user's home directory.
61386138
(On Microsoft Windows the file is named
61396139
<filename>%APPDATA%\postgresql\root.crt</filename>.)

0 commit comments

Comments
 (0)
pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy