diff --git a/doc/src/sgml/libpq.sgml b/doc/src/sgml/libpq.sgml index 3889c6aa7a924d421473726a294ce5876947449e..93dab72261264804491955158fe6e5bbf97e69c7 100644 --- a/doc/src/sgml/libpq.sgml +++ b/doc/src/sgml/libpq.sgml @@ -1,4 +1,4 @@ - + <application>libpq</application> - C Library @@ -254,23 +254,55 @@ This option determines whether or with what priority a SSL TCP/IP connection will be negotiated with the - server. There are four modes: disable will attempt - only an unencrypted SSL connection; - allow will negotiate, trying first a - non-SSL connection, then if that fails, trying an - SSL connection; prefer (the default) - will negotiate, trying first an SSL connection, - then if that fails, trying a regular non-SSL - connection; require will try only an - SSL connection. sslmode is ignored - for Unix domain socket communication. - + server. There are four modes: + + + <literal>sslmode</literal> options + + + + Option + Description + + + + + + + disable + only try a non-SSL connection + + + + allow + first try a non-SSL + connection; if that fails, try an SSL + connection + + + + prefer (default) + first try an SSL connection; if + that fails, try a non-SSL + connection + + + + require + only try an SSL connection + + + + +
+ sslmode is ignored for Unix domain socket + communication. If PostgreSQL is compiled without SSL support, using option require will cause an error, while options allow and prefer will be - accepted but libpq will not in fact attempt + accepted but libpq will not actually attempt an SSL connection.SSLwith libpq