Re: To Andrew Dunstan 2020-01-09 <20200109103014.ga4...@msg.df7cb.de> > sslcert/sslkey options can only be set/modified by superusers when > "password_required" is set. But when password_required is not set, any > user and create user mappings that reference arbitrary files on the > server filesystem.
(A nice addition here which would avoid the problems would be the possibility to pass in the certificates as strings, but that needs support in libpq.) Christoph
