On Tue, Jan 07, 2003 at 16:04:45 +0000,
Jon Jensen <jon@endpoint.com> wrote:
>
> 1. The client always tries to connect via SSL if SSL support was compiled
> in. There is no way to change this presently.
> 2. If the server can do SSL *at all*, it negotiates an SSL connection with
> the client.
Can't you use a "reject" hostssl line in hba.conf to keep SSL connections
from working for particular IP addresses? Does the client not fall back
in this case?