From 2e427ec05a2b4d9e530babbacb295bed722bed61 Mon Sep 17 00:00:00 2001
From: Magnus Hagander <magnus@hagander.net>
Date: Fri, 27 Mar 2009 12:01:57 +0000
Subject: [PATCH] Clearify new SSL certificate verification in libpq
---
doc/src/sgml/release.sgml | 13 ++++++++++---
1 file changed, 10 insertions(+), 3 deletions(-)
diff --git a/doc/src/sgml/release.sgml b/doc/src/sgml/release.sgml
index 896208d568b..b05a8591c60 100644
--- a/doc/src/sgml/release.sgml
+++ b/doc/src/sgml/release.sgml
@@ -1,4 +1,4 @@
-<!-- $PostgreSQL: pgsql/doc/src/sgml/release.sgml,v 1.607 2009/03/27 11:58:21 mha Exp $ -->
+<!-- $PostgreSQL: pgsql/doc/src/sgml/release.sgml,v 1.608 2009/03/27 12:01:57 mha Exp $ -->
<!--
Typical markup:
@@ -2216,8 +2216,15 @@ do it for earlier branch release files.
<listitem>
<para>
- Fix libpq certificate validation for SSL connections (Magnus) bjm:
- details?
+ Fix libpq certificate validation for SSL connections (Magnus)
+ </para>
+
+ <para>
+ libpq now verifies both the certificate and the name of the server by
+ default when making SSL connections. If a root certificate is not
+ available to use for verification, SSL connections will fail. The
+ "sslverify" parameter can be used to disable the host and certificate
+ verification if required.
</para>
</listitem>
--
GitLab