Pretty sure that it's stupid question, but still would be very happy to get answer or some explanation or point to the documentation.

Right now I'm configuring SSL connection to PostgreSQL server with certificates. And as I'm unfortunately not so good in connection and security stuff, I've realised that was completely sure that server should check who is connecting to it server [check] <-- client, but in reality - a client checks whether it connects to the right server server <-- [check] client.

Why it's so? Why not vice versa, why not in both directions?

Thank you for any reply!

1 Answer 1


You are looking at the client library documentation, no wonder it doesn't say anything about the server. The server can indeed be configured for certificate authentication.

At a minimum, that requires turning ssl = on in the configuration and supplying a private key server.key and a public key server.crt.

  • Thank you! Now it's much more clear. The next goal to reach data from /pgsql/data/pg_hba.conf inside google cloud :). But that's a different story.
    – Sergio
    Commented Sep 22, 2021 at 15:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.