Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1bOU7Z-0008Cm-Vn for pgsql-docs@arkaria.postgresql.org; Sat, 16 Jul 2016 18:15:26 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.84_2) (envelope-from ) id 1bOU7Z-00074t-Io for pgsql-docs@arkaria.postgresql.org; Sat, 16 Jul 2016 18:15:25 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1bOU7D-0006cz-J1 for pgsql-docs@postgresql.org; Sat, 16 Jul 2016 18:15:03 +0000 Received: from sss.pgh.pa.us ([66.207.139.130]) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1bOU79-0003x8-RX for pgsql-docs@postgresql.org; Sat, 16 Jul 2016 18:15:03 +0000 Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1]) by sss.pgh.pa.us (8.14.4/8.14.4) with ESMTP id u6GIEu8O011706; Sat, 16 Jul 2016 14:14:56 -0400 From: Tom Lane To: Srikanth Venkatesh cc: pgsql-docs@postgresql.org Subject: Re: hba_conf hostssl clientcert=1 no longer required in 9.4 In-reply-to: References: <22240.1468587836@sss.pgh.pa.us> Comments: In-reply-to Srikanth Venkatesh message dated "Sat, 16 Jul 2016 11:14:35 +0530" Date: Sat, 16 Jul 2016 14:14:56 -0400 Message-ID: <11705.1468692896@sss.pgh.pa.us> X-Pg-Spam-Score: -3.2 (---) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-docs Precedence: bulk Sender: pgsql-docs-owner@postgresql.org Srikanth Venkatesh writes: > So, one has to use "cert clientcert=1" and not just "cert" in hba_conf? So > "clientcert" is an auth-method option of "cert"? That isn't exactly clear > in the hba_conf documentation - > https://www.postgresql.org/docs/9.4/static/auth-methods.html#AUTH-CERT . > That part of the document doesn't mention what you just said. That's exactly not what I said. I've tried to clarify this at https://git.postgresql.org/gitweb/?p=postgresql.git;a=commitdiff;h=745513c70282180afd83c666e43bdb0b6fb8c688 regards, tom lane -- Sent via pgsql-docs mailing list (pgsql-docs@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-docs