On Tue, Sep 15, 2015 at 5:23 PM, Peter Eisentraut wrote:
> The only trick, as I remember, was that clients tend to prefer SSL
> automatically, which we probably don't want for Unix-domain sockets, so
> we'd need to tweak those settings a bit.
>
> The "old patch" referred to in that old thread wasn't actually attached,
> so here it is, for amusement.
Wouldn't this need as well a separate configuration value in
pg_hba.conf? Let's say localssl.
--
Michael