Specifies the name of the file containing the SSL server certificate authority (CA). Relative paths are relative to the data directory. This parameter can only be set in the postgresql.conf file or on the server command line. The default is empty, meaning no CA file is loaded, and client certificate verification is not performed.
In previous releases of PostgreSQL, the name of this file was hard-coded as root.crt.
- Re: [HACKERS] GnuTLS support
- Re: libpq connection strings: control over the cipher suites?
- postgresql v9.5 and SSL: LOG: could not accept SSL connection: tlsv1 alert unknown ca
- Re: Possible SSL improvements for a newcomer to tackle
- Re: Simplify ACL handling for large objects and removal of superuser() checks