On Tue, Jan 27, 2015 at 02:55:56PM +0100, David Guyot wrote:
> Ah! So there was my error! Should be good to explain this in the
> official libpq documentation, don't you think? If I correctly read, the
> connection string as source of the hostname isn't explicit, there is
> only the mention that libpq will check that the responding server is
> “the one I specify”. Once I know that it means “the one I specify in the
> connection string”, it's all clear, but, IMHO, there's still a doubt
> when you don't know what that does mean.
> 
> Anyway, thanks for your help, Magnus.

Clarification doc patch attached and applied.

-- 
  Bruce Momjian  <br...@momjian.us>        http://momjian.us
  EnterpriseDB                             http://enterprisedb.com

  + Everyone has their own god. +
diff --git a/doc/src/sgml/libpq.sgml b/doc/src/sgml/libpq.sgml
new file mode 100644
index ad104a3..e5cab37
*** a/doc/src/sgml/libpq.sgml
--- b/doc/src/sgml/libpq.sgml
*************** postgresql://%2Fvar%2Flib%2Fpostgresql/d
*** 1182,1188 ****
             <para>
              only try an <acronym>SSL</> connection, verify that the
              server certificate is issued by a
!             trusted <acronym>CA</> and that the server host name
              matches that in the certificate
             </para>
            </listitem>
--- 1182,1188 ----
             <para>
              only try an <acronym>SSL</> connection, verify that the
              server certificate is issued by a
!             trusted <acronym>CA</> and that the requested server host name
              matches that in the certificate
             </para>
            </listitem>
-- 
Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general

Reply via email to