"Albe Laurenz" <laurenz(dot)albe(at)wien(dot)gv(dot)at> writes:
> Jorge Godoy wrote:
>> Even though one can require connections using only SSL on the
>> server side, I don't see a method (in pg_hba.conf) that
>> would allow clients with SSL certificates.
> Nor do I.
If you mean *require* clients to have certificates, that's not
determined by pg_hba.conf, it's determined by whether you provide
a root.crt file. See
http://www.postgresql.org/docs/8.2/static/ssl-tcp.html
regards, tom lane