From: Magnus Hagander <magnus@hagander.net>
Date: Fri, 27 Mar 2009 12:01:57 +0000 (+0000)
Subject: Clearify new SSL certificate verification in libpq
X-Git-Tag: REL8_4_BETA1~113
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=2e427ec05a2b4d9e530babbacb295bed722bed61;p=postgresql

Clearify new SSL certificate verification in libpq
---

diff --git a/doc/src/sgml/release.sgml b/doc/src/sgml/release.sgml
index 896208d568..b05a8591c6 100644
--- a/doc/src/sgml/release.sgml
+++ b/doc/src/sgml/release.sgml
@@ -1,4 +1,4 @@
-<!-- $PostgreSQL: pgsql/doc/src/sgml/release.sgml,v 1.607 2009/03/27 11:58:21 mha Exp $ -->
+<!-- $PostgreSQL: pgsql/doc/src/sgml/release.sgml,v 1.608 2009/03/27 12:01:57 mha Exp $ -->
 <!--
 
 Typical markup:
@@ -2216,8 +2216,15 @@ do it for earlier branch release files.
 
      <listitem>
       <para>
-       Fix libpq certificate validation for SSL connections (Magnus) bjm:
-       details?
+       Fix libpq certificate validation for SSL connections (Magnus)
+      </para>
+      
+      <para>
+       libpq now verifies both the certificate and the name of the server by
+       default when making SSL connections. If a root certificate is not
+       available to use for verification, SSL connections will fail. The
+       "sslverify" parameter can be used to disable the host and certificate
+       verification if required.
       </para>
      </listitem>