This patch attempts to outline the supported level of SSL within libpq.

I haven't mentioned any of
~/.postgresql/{root.crt,postgresql.crt,postresql.key} even though they
are checked for in the code, since they do not appear to be supported. I
base this on discussions in pgsql-hackers.

Dominic Mitchell

diff --git a/doc/src/sgml/libpq.sgml b/doc/src/sgml/libpq.sgml
index 3b340364b5e66393bc382d19143b4034880a5422..e39302e178c036d32260e924b0c8a72390593a88 100644 (file)
--- a/doc/src/sgml/libpq.sgml
+++ b/doc/src/sgml/libpq.sgml
@@ -1,5 +1,5 @@
 
 
  
@@ -240,6 +240,15 @@ PGconn *PQconnectdb(const char *conninfo);
        connection.SSL
        sortas="libpq">with libpq
       
+
+      
+       Please note that SSL support in libpq covers
+       encryption only.  It will not verify the validity of the
+       certificate presented by the server that you are connecting to,
+       nor verify that the hostname matches that of the server's
+       certificate.  Additionally, there is no support for client
+       certificates.
+