Update SSL description for when SSL root.crt/server.crt is required;

add link to libpq SSL does from server docs.

Backpatch to 8.2.X.

diff --git a/doc/src/sgml/libpq.sgml b/doc/src/sgml/libpq.sgml
index bba83920d9b848323448a775b499f5b2beaa963c..9aa7961cf861e392d411a0fe797e84f7d4ad5d3d 100644 (file)
--- a/doc/src/sgml/libpq.sgml
+++ b/doc/src/sgml/libpq.sgml
@@ -1,4 +1,4 @@
-<!-- $PostgreSQL: pgsql/doc/src/sgml/libpq.sgml,v 1.220.2.6 2007/02/19 22:06:30 momjian Exp $ -->
+<!-- $PostgreSQL: pgsql/doc/src/sgml/libpq.sgml,v 1.220.2.7 2007/03/30 03:19:19 momjian Exp $ -->
 
  <chapter id="libpq">
   <title><application>libpq</application> - C Library</title>
@@ -4458,7 +4458,7 @@ ldap://ldap.mycompany.com/dc=mycompany,dc=com?uniqueMember?one?(cn=mydatabase)
    <filename>%APPDATA%\postgresql\root.crt</filename>.)
    The SSL connection will
    fail if the server does not present a certificate; therefore, to
-   use this feature the server must also have a <filename>root.crt</> file.
+   use this feature the server must have a <filename>server.crt</> file.
    Certificate Revocation List (CRL) entries are also checked if the file
    <filename>~/.postgresql/root.crl</filename> exists (<filename>%APPDATA%\postgresql\root.crl</filename>
    on Microsoft Windows).

diff --git a/doc/src/sgml/runtime.sgml b/doc/src/sgml/runtime.sgml
index 4eaf2bab5918095c3a2c49994082b756d56f9730..7d8adc9a920debc57f00cd51b3eb9d5862191ec9 100644 (file)
--- a/doc/src/sgml/runtime.sgml
+++ b/doc/src/sgml/runtime.sgml
@@ -1,4 +1,4 @@
-<!-- $PostgreSQL: pgsql/doc/src/sgml/runtime.sgml,v 1.374 2006/11/25 22:44:48 petere Exp $ -->
+<!-- $PostgreSQL: pgsql/doc/src/sgml/runtime.sgml,v 1.374.2.1 2007/03/30 03:19:19 momjian Exp $ -->
 
 <chapter Id="runtime">
  <title>Operating System Environment</title>
@@ -1552,10 +1552,11 @@ chmod og-rwx server.key
    certificates of the <acronym>CA</acronym>(s) you wish to check for in
    the file <filename>root.crt</filename> in the data directory.  When
    present, a client certificate will be requested from the client
-   during SSL connection startup, and it must have been signed by one of the
-   certificates present in <filename>root.crt</filename>.  Certificate 
-   Revocation List (CRL) entries are also checked if the file 
-   <filename>root.crl</filename> exists.
+   during SSL connection startup, and it must have been signed by one of
+   the certificates present in <filename>root.crt</filename>.  (See <xref
+   linkend="libpq-ssl"> for a description of how to set up client
+   certificates.) Certificate Revocation List (CRL) entries are also
+   checked if the file <filename>root.crl</filename> exists.
   </para>
 
   <para>