TLS Modes

TLS Modes	Description
VerifyCA	Verifies Certificate Authority (CA) certificate. CA Certificate: Not Required. Provide CA certificate for verification. Client Certificate: Not required. Client certificate file for connections requiring client authentication. Client Key: Not required. Client key file used for connections requiring client authentication.
VerifyFull	The server host name is verified to ensure that it matches the Common Name in the server certificate. CA Certificate: Required. Provide CA certificate for verification. Client Certificate: Not required. Client certificate file for connections requiring client authentication. Client Key: Not required. Client key file used for connections requiring client authentication.

Note: You can override the CA Certificate, Client Certificate, and Client Key by using an app property. For more information about overriding certificates, see "Environment Variables" topic in TIBCO Flogo® Enterprise User's Guide.

Note: The Client Key file permissions must be 0660.

For more details on TLS modes, see PostgreSQL SSL Support Documentation.