-<!-- $PostgreSQL: pgsql/doc/src/sgml/libpq.sgml,v 1.278 2009/02/11 04:08:47 momjian Exp $ -->
+<!-- $PostgreSQL: pgsql/doc/src/sgml/libpq.sgml,v 1.279 2009/03/23 01:45:29 momjian Exp $ -->
<chapter id="libpq">
<title><application>libpq</application> - C Library</title>
This option controls how libpq verifies the certificate on the
server when performing an <acronym>SSL</> connection. There are
three options: <literal>none</> disables verification completely
- (not recommended!); <literal>cert</> enables verification that
- the certificate chains to a known CA only; <literal>cn</> will
- both verify that the certificate chains to a known CA and that
- the <literal>cn</> attribute of the certificate matches the
- hostname the connection is being made to (default).
+ (not recommended); <literal>cert</> enables verification that
+ the server certificate chains to a known certificate
+ authority (CA); <literal>cn</> will both verify that the
+ certificate chains to a known CA and that the <literal>cn</>
+ attribute of the server certificate matches the server's
+ hostname (default).
</para>
<para>