To the last sentence in my last post "Re: SSL client crt verification":
"From docs I understand that I only have to set SSL = true in postgresql.conf
to switch it on (in addition to providing the crt and key files)."
I should have added:
"...and using "hostssl" in pg_hba.conf (although "host" also works on my
8.0.3 server, presumably because of the default sslmode=prefer in libpq)."
KPL