Add two documentation tables to outline SSL file usage for client and server.

diff --git a/doc/src/sgml/libpq.sgml b/doc/src/sgml/libpq.sgml
index be43ec7814ff8a173ce567b120ebb37a21640ff5..76f9bfdee06ba6169bc317820835f3163e733e8f 100644 (file)
--- a/doc/src/sgml/libpq.sgml
+++ b/doc/src/sgml/libpq.sgml
@@ -1,4 +1,4 @@
-
+
 
 
  <application>libpq</application> - C Library
@@ -5200,6 +5200,48 @@ defaultNoticeProcessor(void *arg, const char *message)
    application.
   
 
+  
+   SSL Client File Usage
+   
+    
+     
+      File
+      Contents
+      Effect
+     
+    
+
+    
+
+     
+      ~/.postgresql/postgresql.crt
+      client certificate
+      requested by server
+     
+
+     
+      ~/.postgresql/postgresql.key
+      client private key
+      used to authenticate client certificate
+     
+
+     
+      ~/.postgresql/root.crt
+      trusted certificate authorities
+      requests server certificate; checks certificate is
+      signed by a trusted certificate authority
+     
+
+     
+      ~/.postgresql/root.crl
+      certificates revoked by certificate authorities
+      server certificate must not be on this list
+     
+
+    
+   
+  
+
  
 
 

diff --git a/doc/src/sgml/runtime.sgml b/doc/src/sgml/runtime.sgml
index b9f312daeda7f29b3e05a5650497bca03f8ef03b..73322384bb49ae77b546dbd1ceade5eb6e137392 100644 (file)
--- a/doc/src/sgml/runtime.sgml
+++ b/doc/src/sgml/runtime.sgml
@@ -1,4 +1,4 @@
-
+
 
 
  Operating System Environment
@@ -1641,7 +1641,49 @@ $ kill -INT `head -1 /usr/local/pgsql/data/postmaster.pid`
    the server for changes in them to take effect.
   
 
-  
+  
+   SSL Server File Usage
+   
+    
+     
+      File
+      Contents
+      Effect
+     
+    
+
+    
+
+     
+      server.crt
+      server certificate
+      requested by client
+     
+
+     
+      server.key
+      server private key
+      used to authenticate server certificate
+     
+
+     
+      root.crt
+      trusted certificate authorities
+      requests client certificate; checks certificate is
+      signed by a trusted certificate authority
+     
+
+     
+      root.crl
+      certificates revoked by certificate authorities
+      client certificate must not be on this list
+     
+
+    
+   
+  
+
+  
    Creating a Self-Signed Certificate