cert

Authenticate using SSL client certificates. See Section 20.12 for details.

Reading PG 18·Select a recorded version

Method: cert
Configuration: pg_hba.conf
Inventory: User-visible source authentication method
aliases: Unknown
manual path: /docs/18/auth-cert.html
signature: Unknown

Definition PG 18

20.12. Certificate Authentication

This authentication method uses SSL client certificates to perform authentication. It is therefore only available for SSL connections; see Section 18.9.2 for SSL configuration instructions. When using this authentication method, the server will require that the client provide a valid, trusted certificate. No password prompt will be sent to the client. The cn (Common Name) attribute of the certificate will be compared to the requested database user name, and if they match the login will be allowed. User name mapping can be used to allow cn to be different from the database user name.

The following configuration options are supported for SSL certificate authentication:

map: Allows for mapping between system and database user names. See Section 20.2 for details.

It is redundant to use the clientcert option with cert authentication because cert authentication is effectively trust authentication with clientcert=verify-full.

Documented method options and alternatives

Option or term	Meaning
map	Allows for mapping between system and database user names. See Section 20.2 for details.

Compare versions

Complete source facts

attributes

{"configuration":"pg_hba.conf","inventory":"User-visible source authentication method","method":"cert"}

Source references

Full definition and evidence JSON

Definition sources

center · PostgreSQL 18 · 555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f

Text language: en · 555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f