Clearify new SSL certificate verification in libpq

diff --git a/doc/src/sgml/release.sgml b/doc/src/sgml/release.sgml
index 60b53760d2eb23d25694ebe884b8df7055efefd8..2f29d19c354ba3658328226f4de5778040e60697 100644 (file)
--- a/doc/src/sgml/release.sgml
+++ b/doc/src/sgml/release.sgml
@@ -2216,8 +2216,15 @@ do it for earlier branch release files.
 
      <listitem>
       <para>
-       Fix libpq certificate validation for SSL connections (Magnus) bjm:
-       details?
+       Fix libpq certificate validation for SSL connections (Magnus)
+      </para>
+      
+      <para>
+       libpq now verifies both the certificate and the name of the server by
+       default when making SSL connections. If a root certificate is not
+       available to use for verification, SSL connections will fail. The
+       "sslverify" parameter can be used to disable the host and certificate
+       verification if required.
       </para>
      </listitem>