TLS Modes

TLS Modes Description
VerifyCA Verifies Certificate Authority (CA) certificate.
  • CA Certificate: Not Required. Provide CA certificate for verification.
  • Client Certificate: Not required. Client certificate file for connections requiring client authentication.
  • Client Key: Not required. Client key file used for connections requiring client authentication.
VerifyFull The server host name is verified to ensure that it matches the Common Name in the server certificate.
  • CA Certificate: Required. Provide CA certificate for verification.
  • Client Certificate: Not required. Client certificate file for connections requiring client authentication.
  • Client Key: Not required. Client key file used for connections requiring client authentication.
Note: You can override the CA Certificate, Client Certificate, and Client Key by using an app property. For more information about overriding certificates, see "Environment Variables" topic in TIBCO Flogo® Enterprise User's Guide.
Note: The Client Key file permissions must be 0660.

For more details on TLS modes, see PostgreSQL SSL Support Documentation.