On Tue, Jan 27, 2015 at 02:55:56PM +0100, David Guyot wrote:
> Ah! So there was my error! Should be good to explain this in the
> official libpq documentation, don't you think? If I correctly read, the
> connection string as source of the hostname isn't explicit, there is
> only the mention that libpq will check that the responding server is
> “the one I specify”. Once I know that it means “the one I specify in the
> connection string”, it's all clear, but, IMHO, there's still a doubt
> when you don't know what that does mean.
>
> Anyway, thanks for your help, Magnus.
Clarification doc patch attached and applied.
--
Bruce Momjian <bruce@xxxxxxxxxx> http://momjian.us
EnterpriseDB http://enterprisedb.com
+ Everyone has their own god. +
diff --git a/doc/src/sgml/libpq.sgml b/doc/src/sgml/libpq.sgml
new file mode 100644
index ad104a3..e5cab37
*** a/doc/src/sgml/libpq.sgml
--- b/doc/src/sgml/libpq.sgml
*************** postgresql://%2Fvar%2Flib%2Fpostgresql/d
*** 1182,1188 ****
<para>
only try an <acronym>SSL</> connection, verify that the
server certificate is issued by a
! trusted <acronym>CA</> and that the server host name
matches that in the certificate
</para>
</listitem>
--- 1182,1188 ----
<para>
only try an <acronym>SSL</> connection, verify that the
server certificate is issued by a
! trusted <acronym>CA</> and that the requested server host name
matches that in the certificate
</para>
</listitem>
--
Sent via pgsql-general mailing list (pgsql-general@xxxxxxxxxxxxxx)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general
