Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
Skip to content

Commit 5817673

Browse files
committed
Better document libpq sslverify behavior as requiring root.crt.
1 parent ebac30e commit 5817673

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

doc/src/sgml/libpq.sgml

+4-4
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
<!-- $PostgreSQL: pgsql/doc/src/sgml/libpq.sgml,v 1.281 2009/03/31 01:41:27 tgl Exp $ -->
1+
<!-- $PostgreSQL: pgsql/doc/src/sgml/libpq.sgml,v 1.282 2009/04/11 12:27:53 momjian Exp $ -->
22

33
<chapter id="libpq">
44
<title><application>libpq</application> - C Library</title>
@@ -6131,9 +6131,9 @@ myEventProc(PGEventId evtId, void *evtInfo, void *passThrough)
61316131

61326132
<para>
61336133
When the <literal>sslverify</> parameter is set to <literal>cn</> or
6134-
<literal>cert</>, libpq will verify that the server certificate is
6135-
trustworthy by checking the certificate chain up to a <acronym>CA</>.
6136-
For this to work, place the certificate of a trusted <acronym>CA</>
6134+
<literal>cert</>, libpq requires a trustworthy server certificate by
6135+
checking the certificate chain up to a <acronym>CA</>.
6136+
To allow verification, place the certificate of a trusted <acronym>CA</>
61376137
in the file <filename>~/.postgresql/root.crt</> in the user's home directory.
61386138
(On Microsoft Windows the file is named
61396139
<filename>%APPDATA%\postgresql\root.crt</filename>.)

0 commit comments

Comments
 (0)