From 2e427ec05a2b4d9e530babbacb295bed722bed61 Mon Sep 17 00:00:00 2001
From: Magnus Hagander <magnus@hagander.net>
Date: Fri, 27 Mar 2009 12:01:57 +0000
Subject: [PATCH] Clearify new SSL certificate verification in libpq

---
 doc/src/sgml/release.sgml | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/doc/src/sgml/release.sgml b/doc/src/sgml/release.sgml
index 896208d568..b05a8591c6 100644
--- a/doc/src/sgml/release.sgml
+++ b/doc/src/sgml/release.sgml
@@ -1,4 +1,4 @@
-<!-- $PostgreSQL: pgsql/doc/src/sgml/release.sgml,v 1.607 2009/03/27 11:58:21 mha Exp $ -->
+<!-- $PostgreSQL: pgsql/doc/src/sgml/release.sgml,v 1.608 2009/03/27 12:01:57 mha Exp $ -->
 <!--
 
 Typical markup:
@@ -2216,8 +2216,15 @@ do it for earlier branch release files.
 
      <listitem>
       <para>
-       Fix libpq certificate validation for SSL connections (Magnus) bjm:
-       details?
+       Fix libpq certificate validation for SSL connections (Magnus)
+      </para>
+      
+      <para>
+       libpq now verifies both the certificate and the name of the server by
+       default when making SSL connections. If a root certificate is not
+       available to use for verification, SSL connections will fail. The
+       "sslverify" parameter can be used to disable the host and certificate
+       verification if required.
       </para>
      </listitem>