BTW, doesn't this patch leak memory at freePGconn() time? I alsothink that more of it should be inside #ifdef USE_SSL --- ie,the options should be treated like requiressl not sslmode, andnot exist in a non-SSL build.
regards, tom lane