diff options
| author | Magnus Hagander <magnus@hagander.net> | 2009-03-27 12:01:57 +0000 |
|---|---|---|
| committer | Magnus Hagander <magnus@hagander.net> | 2009-03-27 12:01:57 +0000 |
| commit | 2e427ec05a2b4d9e530babbacb295bed722bed61 (patch) | |
| tree | 643e5f6cc7c1987f65bc5125fbf45a0eb3703a09 | |
| parent | cc42c14e3693c5fe74dd14b40b8d164e62168a55 (diff) | |
Clearify new SSL certificate verification in libpq
| -rw-r--r-- | doc/src/sgml/release.sgml | 13 |
1 files changed, 10 insertions, 3 deletions
diff --git a/doc/src/sgml/release.sgml b/doc/src/sgml/release.sgml index 896208d568b..b05a8591c60 100644 --- a/doc/src/sgml/release.sgml +++ b/doc/src/sgml/release.sgml @@ -1,4 +1,4 @@ -<!-- $PostgreSQL: pgsql/doc/src/sgml/release.sgml,v 1.607 2009/03/27 11:58:21 mha Exp $ --> +<!-- $PostgreSQL: pgsql/doc/src/sgml/release.sgml,v 1.608 2009/03/27 12:01:57 mha Exp $ --> <!-- Typical markup: @@ -2216,8 +2216,15 @@ do it for earlier branch release files. <listitem> <para> - Fix libpq certificate validation for SSL connections (Magnus) bjm: - details? + Fix libpq certificate validation for SSL connections (Magnus) + </para> + + <para> + libpq now verifies both the certificate and the name of the server by + default when making SSL connections. If a root certificate is not + available to use for verification, SSL connections will fail. The + "sslverify" parameter can be used to disable the host and certificate + verification if required. </para> </listitem> |