Re: libpq 8.4 beta1: $PGHOST complains about missing root.crt

Tom Lane wrote:
> I am of the opinion that sslverify should have these values:
>
>     off = never verify
>     on = verify if root.crt is present (default behavior)
>     force = verify, failing if root.crt is not present
>
> and the people who actually want to be "sure they're secure" can set the
> "force" value in their environment.
>
> This is not measurably different in effect from the fact that we have
> sslmode defaulting to "prefer" rather than "require".  If you want to be
> "sure you're secure" you need the latter setting, but I don't believe
> there is even remotely a consensus for making that the default.
>
> BTW, what in the world prompted us to use "cn" as an allowed value for
> sslverify?  It looks for all the world like a typo for "on".

l1 and 0O where taken?   ;-)

It would be nice if 'sslverify' mimicked 'sslmode', which has these
values:

    disable
    allow
    prefer
    require

I don't see how we could use 'allow', but 'disable', 'prefer', and
'require' seem to work for sslverify, like sslmode.

--
  Bruce Momjian  <bruce@momjian.us>        http://momjian.us
  EnterpriseDB                             http://enterprisedb.com

  + If your life is a hard drive, Christ can be your backup. +