add link to libpq SSL does from server docs.
Backpatch to 8.2.X.
-
+
%APPDATA%\postgresql\root.crt.)
The SSL connection will
fail if the server does not present a certificate; therefore, to
- use this feature the server must also have a root.crt> file.
+ use this feature the server must have a server.crt> file.
Certificate Revocation List (CRL) entries are also checked if the file
~/.postgresql/root.crl exists (%APPDATA%\postgresql\root.crl
on Microsoft Windows).
-
+
Operating System Environment
certificates of the
CA(s) you wish to check for in
the file root.crt in the data directory. When
present, a client certificate will be requested from the client
- during SSL connection startup, and it must have been signed by one of the
- certificates present in root.crt. Certificate
- Revocation List (CRL) entries are also checked if the file
- root.crl exists.
+ during SSL connection startup, and it must have been signed by one of
+ the certificates present in
root.crt. (See
+ linkend="libpq-ssl"> for a description of how to set up client
+ certificates.) Certificate Revocation List (CRL) entries are also
+ checked if the file root.crl exists.