Srikanth Venkatesh <srix55(at)gmail(dot)com> writes:
> So, one has to use "cert clientcert=1" and not just "cert" in hba_conf? So
> "clientcert" is an auth-method option of "cert"? That isn't exactly clear
> in the hba_conf documentation -
> https://www.postgresql.org/docs/9.4/static/auth-methods.html#AUTH-CERT .
> That part of the document doesn't mention what you just said.
That's exactly not what I said.
I've tried to clarify this at
https://git.postgresql.org/gitweb/?p=postgresql.git;a=commitdiff;h=745513c70282180afd83c666e43bdb0b6fb8c688
regards, tom lane