mirror of
https://git.postgresql.org/git/postgresql.git
synced 2025-01-24 18:55:04 +08:00
Better document libpq sslverify behavior as requiring root.crt.
This commit is contained in:
parent
ebac30ed11
commit
5817673448
@ -1,4 +1,4 @@
|
|||||||
<!-- $PostgreSQL: pgsql/doc/src/sgml/libpq.sgml,v 1.281 2009/03/31 01:41:27 tgl Exp $ -->
|
<!-- $PostgreSQL: pgsql/doc/src/sgml/libpq.sgml,v 1.282 2009/04/11 12:27:53 momjian Exp $ -->
|
||||||
|
|
||||||
<chapter id="libpq">
|
<chapter id="libpq">
|
||||||
<title><application>libpq</application> - C Library</title>
|
<title><application>libpq</application> - C Library</title>
|
||||||
@ -6131,9 +6131,9 @@ myEventProc(PGEventId evtId, void *evtInfo, void *passThrough)
|
|||||||
|
|
||||||
<para>
|
<para>
|
||||||
When the <literal>sslverify</> parameter is set to <literal>cn</> or
|
When the <literal>sslverify</> parameter is set to <literal>cn</> or
|
||||||
<literal>cert</>, libpq will verify that the server certificate is
|
<literal>cert</>, libpq requires a trustworthy server certificate by
|
||||||
trustworthy by checking the certificate chain up to a <acronym>CA</>.
|
checking the certificate chain up to a <acronym>CA</>.
|
||||||
For this to work, place the certificate of a trusted <acronym>CA</>
|
To allow verification, place the certificate of a trusted <acronym>CA</>
|
||||||
in the file <filename>~/.postgresql/root.crt</> in the user's home directory.
|
in the file <filename>~/.postgresql/root.crt</> in the user's home directory.
|
||||||
(On Microsoft Windows the file is named
|
(On Microsoft Windows the file is named
|
||||||
<filename>%APPDATA%\postgresql\root.crt</filename>.)
|
<filename>%APPDATA%\postgresql\root.crt</filename>.)
|
||||||
|
Loading…
Reference in New Issue
Block a user