<!-- $PostgreSQL: pgsql/doc/src/sgml/release.sgml,v 1.630 2009/04/19 15:49:34 tgl Exp $ -->

<!-- $PostgreSQL: pgsql/doc/src/sgml/release.sgml,v 1.631 2009/04/24 13:01:30 mha Exp $ -->

<!--

Typical markup:

</para>

<para>

<application>libpq</> nowverifiesboth the certificate and

the name of the server by default when making <acronym>SSL</>

<application>libpq</> nowsupports verifyingboth the certificate

andthe name of the server when making <acronym>SSL</>

connections. If a root certificate is not available to use for

verification, <acronym>SSL</> connections will fail. The

<literal>sslverify</> parameter can be used to disable the host

and certificate verification if required.

</para>

</listitem>

<listitem>

<para>

Add connection parameter <literal>sslverify</> to control

the verification of the server's certificate

(Magnus)

<literal>sslmode</> parameter is used to enable the certificate

verification.

</para>

<para>

The default isfull verification.

The default isstill not to do any verification.

</para>

</listitem>