28d3676 · typeable/postgresql-simple

206-- SSL/TLS will typically "just work" if your postgresql server supports or

207-- requires it. However, note that libpq is trivially vulnerable to a MITM

208-- attack without setting additional SSL parameters in the connection string.

209−-- In particular, @sslmode@ needs to set be @require@, @verify-ca@, or

209+-- In particular, @sslmode@ needs to be set to @require@, @verify-ca@, or

210−-- @verify-full@ to perform certificate validation. When @sslmode@ is

210+-- @verify-full@ in order to perform certificate validation. When @sslmode@

211−-- @require@, then you will also need to have a @sslrootcert@ file,

211+-- is @require@, then you will also need to specify a @sslrootcert@ file,

212-- otherwise no validation of the server's identity will be performed.

213-- Client authentication via certificates is also possible via the

214-- @sslcert@ and @sslkey@ parameters.