From c242e6b6d4042446d005732fdcc1daadc53071f6 Mon Sep 17 00:00:00 2001
From: Bruce Momjian <bruce@momjian.us>
Date: Mon, 23 Mar 2009 01:45:29 +0000
Subject: [PATCH] Clarify libpq 'sslverify' documentation wording.
---
doc/src/sgml/libpq.sgml | 13 +++++++------
1 file changed, 7 insertions(+), 6 deletions(-)
diff --git a/doc/src/sgml/libpq.sgml b/doc/src/sgml/libpq.sgml
index cf8cec83de1..14bc92362bc 100644
--- a/doc/src/sgml/libpq.sgml
+++ b/doc/src/sgml/libpq.sgml
@@ -1,4 +1,4 @@
-<!-- $PostgreSQL: pgsql/doc/src/sgml/libpq.sgml,v 1.278 2009/02/11 04:08:47 momjian Exp $ -->
+<!-- $PostgreSQL: pgsql/doc/src/sgml/libpq.sgml,v 1.279 2009/03/23 01:45:29 momjian Exp $ -->
<chapter id="libpq">
<title><application>libpq</application> - C Library</title>
@@ -285,11 +285,12 @@
This option controls how libpq verifies the certificate on the
server when performing an <acronym>SSL</> connection. There are
three options: <literal>none</> disables verification completely
- (not recommended!); <literal>cert</> enables verification that
- the certificate chains to a known CA only; <literal>cn</> will
- both verify that the certificate chains to a known CA and that
- the <literal>cn</> attribute of the certificate matches the
- hostname the connection is being made to (default).
+ (not recommended); <literal>cert</> enables verification that
+ the server certificate chains to a known certificate
+ authority (CA); <literal>cn</> will both verify that the
+ certificate chains to a known CA and that the <literal>cn</>
+ attribute of the server certificate matches the server's
+ hostname (default).
</para>
<para>
--
GitLab