diff options
author | Bruce Momjian <bruce@momjian.us> | 2003-07-25 22:07:44 +0000 |
---|---|---|
committer | Bruce Momjian <bruce@momjian.us> | 2003-07-25 22:07:44 +0000 |
commit | 02c323193728d2bc2d012e0bd5259fa428f0a3ed (patch) | |
tree | 8a1de0099ed4a8e6bbaf1f284fc635a7d5dbcc8c /doc/FAQ | |
parent | ad73f6b86fbd09800ecc8ea4d1b173a8e655cdb7 (diff) | |
download | postgresql-02c323193728d2bc2d012e0bd5259fa428f0a3ed.tar.gz postgresql-02c323193728d2bc2d012e0bd5259fa428f0a3ed.zip |
Add mention of new SSL capabilities.
Diffstat (limited to 'doc/FAQ')
-rw-r--r-- | doc/FAQ | 10 |
1 files changed, 7 insertions, 3 deletions
@@ -1,7 +1,7 @@ Frequently Asked Questions (FAQ) for PostgreSQL - Last updated: Wed Jul 23 12:53:27 EDT 2003 + Last updated: Fri Jul 25 18:07:30 EDT 2003 Current maintainer: Bruce Momjian (pgman@candle.pha.pa.us) @@ -1111,8 +1111,12 @@ CREATE TABLE test (x int, modtime timestamp DEFAULT CURRENT_TIMESTAMP ); * contrib/pgcrypto contains many encryption functions for use in SQL queries. - * The only way to encrypt transmission from the client to the server - is by using hostssl in pg_hba.conf. + * To encrypt transmission from the client to the server, the server + must have the ssl option set to true in postgresql.conf, and an + applicable host or hostssl record must exist in pg_hba.conf, and + the client sslmode must not be disable. (Note that it is also + possible to use a third-party encrypted transport, such as stunnel + or ssh, rather than PostgreSQL's native SSL connections.) * Database user passwords are automatically encrypted when stored in version 7.3. In previous versions, you must enable the option PASSWORD_ENCRYPTION in postgresql.conf. |