Hi Chris
Thank you for your feedback. You are right, libpq verify if the server is
trustworthy by checking server certificate and check hostname matches with
server common name when sslmode is verify-full, and it is already explained in
another documentation page
https://www.postgresql.org/d
Hi, Cary.
On 3/2/20 1:06 PM, Cary Huang wrote:
Hi
I found a document bug about client authentication using TLS
certificate. When clientcert authentication is enabled in pg_hba.conf,
libpq does not verify that the *common name*in certificate
matches*database username*like it is described in t
