-
+
This option determines whether or with what priority a
SSL> TCP/IP connection will be negotiated with the
- server. There are four modes: disable> will attempt
- only an unencrypted
SSL> connection;
- allow> will negotiate, trying first a
- non-
SSL> connection, then if that fails, trying an
-
SSL> connection; prefer> (the default)
- will negotiate, trying first an
SSL> connection,
- then if that fails, trying a regular non-
SSL>
- connection; require> will try only an
-
SSL> connection. sslmode> is ignored
- for Unix domain socket communication.
-
+ server. There are four modes:
+
+
+
sslmode options
+
+
+ |
+ Option
+ Description
+
+
+
+
+
+ |
+ disable>
+
only try a non-SSL> connection
+
+
+ |
+ allow>
+ connection; if that fails, try an
SSL>
+ connection
+
+
+ |
+ prefer> (default)
+
first try an SSL> connection; if
+ that fails, try a non-
SSL>
+ connection
+
+
+ |
+ require>
+
only try an SSL> connection
+
+
+
+
+
+ sslmode> is ignored for Unix domain socket
+ communication.
If
PostgreSQL> is compiled without SSL support,
using option require> will cause an error, while
options allow> and prefer> will be
- accepted but
libpq> will not in fact attempt
+ accepted but
libpq> will not actually attempt
connection.
SSL>
sortas="libpq">with libpq>