Members
- DISABLE
- never TLS
- PREFER
- TLS when the server offers it, no certificate check (the default, like libpq)
- REQUIRE
- TLS, no certificate check
- VERIFY_CA
- TLS, the chain must lead to a trusted root
- VERIFY_FULL
- TLS, the chain and the host name are checked
- ALLOW
- a plain connection first; TLS (no certificate check) only when the server refuses that