Re: sslmode verify-ca and verify-full: essentialy the same?

From: Bruce Momjian <bruce(at)momjian(dot)us>
To: David Guyot <david(dot)guyot(at)europecamions-interactive(dot)com>
Cc: Magnus Hagander <magnus(at)hagander(dot)net>, "pgsql-general(at)postgresql(dot)org" <pgsql-general(at)postgresql(dot)org>
Subject: Re: sslmode verify-ca and verify-full: essentialy the same?
Date: 2015-01-30 02:21:22
Message-ID: 20150130022122.GA7403@momjian.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On Tue, Jan 27, 2015 at 02:55:56PM +0100, David Guyot wrote:
> Ah! So there was my error! Should be good to explain this in the
> official libpq documentation, don't you think? If I correctly read, the
> connection string as source of the hostname isn't explicit, there is
> only the mention that libpq will check that the responding server is
> “the one I specify”. Once I know that it means “the one I specify in the
> connection string”, it's all clear, but, IMHO, there's still a doubt
> when you don't know what that does mean.
>
> Anyway, thanks for your help, Magnus.

Clarification doc patch attached and applied.

--
Bruce Momjian <bruce(at)momjian(dot)us> http://momjian.us
EnterpriseDB http://enterprisedb.com

+ Everyone has their own god. +

Attachment Content-Type Size
libpq.diff text/x-diff 864 bytes

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Michael Paquier 2015-01-30 03:08:01 Re: array in a store procedure in C
Previous Message David G Johnston 2015-01-30 01:25:18 Re: what is parse <unnamed>?