|
1 |
| -<!-- $PostgreSQL: pgsql/doc/src/sgml/libpq.sgml,v 1.271 2008/11/25 19:30:42 tgl Exp $ --> |
| 1 | +<!-- $PostgreSQL: pgsql/doc/src/sgml/libpq.sgml,v 1.272 2008/12/02 12:42:11 mha Exp $ --> |
2 | 2 |
|
3 | 3 | <chapter id="libpq">
|
4 | 4 | <title><application>libpq</application> - C Library</title>
|
|
283 | 283 | only if the certificate also has just the IP address in the
|
284 | 284 | <literal>cn</> field.
|
285 | 285 | </para>
|
| 286 | + |
| 287 | + <para> |
| 288 | + If the <literal>cn</> attribute in the certificate sent by the |
| 289 | + server starts with an asterisk (<literal>*</>), it will be treated |
| 290 | + as a wildcard. This wildcard can only be present at the start of |
| 291 | + the value, and will match all characters <emphasis>except</> a |
| 292 | + dot (<literal>.</>). This means the certificate will not match |
| 293 | + subdomains. |
| 294 | + </para> |
286 | 295 | </listitem>
|
287 | 296 | </varlistentry>
|
288 | 297 |
|
|