why are we not asked to import server.crt while connecting from psql to postgres server secured using ssl

Question

This is a very basic question. i have to import the server.crt on the client side java trustore to connect using jdbc to postgres server secured by ssl. But when i try psql from same machine, it shows the connection as encrypted. How does psql import the server certificate?

psql "postgresql://$POSTGRES_HOST:$PG_PORT/postgres" -U postgres psql (9.6.18) SSL connection (protocol: TLSv1.2, cipher: ECDHE-RSA-AES256-GCM-SHA384, bits: 256, compression: off) Type "help" for help.

Regards, Shankar

Answer 1

You can use a cert to set up encryption, without verifying that the cert was signed by the correct authority. This is what psql does by default if there is no root.crt available and the sslmode is 'require' or below.

JDBC must be configured for, or default to, the equivalent of a sslmode above 'require'.