[pgpool-general: 8703] Will pgpool use SSL encryption only when connected with a certain user?

[Zhaoxun Yan]

Hi Tatsuo,

I noticed that postgresql will specify hosting a particular user with SSL
authentication:
https://www.postgresql.org/docs/current/auth-pg-hba-conf.html

and pgpool has to set its own hba file to override the one of postgresql:
https://www.pgpool.net/docs/44/en/html/auth-pool-hba-conf.html

So the scenario seems:
postgresql --plain TCP-- pgpool  --SSL TCP-- some client

Am I correct?
Also I would like to know if there is a method to establish an SSL TCP with
a client without asking the client to show its certificate, just like https
does to encrypt http content.

https://serverfault.com/questions/1127529/how-to-use-nginx-as-ssl-reverse-proxy-for-postgresql-tcp-connection/

Thanks in advance
  Zhaoxun
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.pgpool.net/pipermail/pgpool-general/attachments/20230331/eaa372b0/attachment.htm>