Ray Stell
Also fix some libpq title capitalization problems.
-
Certificate verification
+
Client Verification of Server Certificates
By default,
PostgreSQL> will not perform any verification of
-
Client certificates
+
Client Certificates
If the server requests a trusted client certificate,
-
Protection provided in different modes
+
Protection Provided in Different Modes
The different values for the sslmode> parameter provide different
protection against three types of attacks:
-
SSL attacks
+
SSL Attacks
|
-
SSL mode descriptions
+
SSL Mode Descriptions
|
-
SSL File Usage
+
SSL Client File Usage
Libpq/Client SSL File Usage
-
SSL library initialization
+
SSL Library Initialization
If your application initializes libssl> and/or
|
- server.crt>
+ $PGDATA/server.crt>
server certificate
sent to client to indicate server's identity
|
- server.key>
+ $PGDATA/server.key>
server private key
proves server certificate was sent by the owner; does not indicate
certificate owner is trustworthy
|
- root.crt>
+ $PGDATA/root.crt>
trusted certificate authorities
checks that client certificate is
signed by a trusted certificate authority
|
- root.crl>
+ $PGDATA/root.crl>
certificates revoked by certificate authorities
client certificate must not be on this list