Patch to provide example for ssl certification authentication

Started by Dave Cramerover 3 years ago1 messages

Dave Cramer

davecramer@gmail.com

over 3 years ago

1 attachment(s)

I couldn't find a clear document which showed how this was done.
The example would help.

Dave Cramer

Attachments:

ssl_cert_auth.patchapplication/octet-stream; name=ssl_cert_auth.patchDownload

diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml
index b2a459fb0d..1a87510e91 100644
--- a/doc/src/sgml/client-auth.sgml
+++ b/doc/src/sgml/client-auth.sgml
@@ -752,6 +752,12 @@ host    postgres        all             192.168.93.0/24         ident
 # TYPE  DATABASE        USER            ADDRESS                 METHOD
 host    postgres        all             192.168.12.10/32        scram-sha-256

+# Require SSL for host localhost any user database "postgres"
+# Authenticate using clientcert
+#
+# TYPE  DATABASE        USER            ADDRESS                 METHOD
+hostssl postgres        all             localhost               trust  clientcert=verify-full
+