通过有效的客户端 SSL/TLS 证书进行多因素身份验证
已记录的来源状态与原始语言说明；缺少版本证据时明确标为未知。
来源快照记录 PostgreSQL 8.1–18 的变化节点；历史矩阵独立记录 7.4–18 的状态。两者均未记录 PostgreSQL 19 或 20 的支持状态，较新版本明确保留为未知。这些来源声明与运行测量相互独立。
安全
说明
如果 pg_hba.conf 中的身份验证条目指定了 clientcert=verify-full，则客户端必须提供与登录名匹配的有效 SSL 证书，或者基于映射的客户端名称。
https://www.postgresql.org/docs/12/ssl-tcp.html#SSL-CLIENT-CERTIFICATES
所选版本: PostgreSQL 18
不支持
比较版本
原始文档链接
相关来源快照条目 · 此关系来自原始来源；两组矩阵各自保留独立状态。
完整来源事实与出处
legacy · center · 1b60429f05c473e0dfe69de281a58b7a2811e2b6dfe933cbd1c6a28b719a4c60
{
"Key": "326",
"SourceKind": "legacy",
"SourceDatabase": "center",
"SourceTable": "featurematrix_feature",
"SourceKey": "326",
"SourceHash": "1b60429f05c473e0dfe69de281a58b7a2811e2b6dfe933cbd1c6a28b719a4c60",
"Name": "通过有效的客户端 SSL/TLS 证书进行多因素身份验证",
"NameLocale": "zh-Hans",
"GroupKey": "6",
"GroupName": "安全",
"GroupLocale": "zh-Hans",
"Ordinal": 0,
"GroupOrder": 20,
"Facts": {
"featuredescription": "如果 pg_hba.conf 中的身份验证条目指定了 `clientcert=verify-full`，则客户端必须提供与登录名匹配的有效 SSL 证书，或者基于映射的客户端名称。\n\n[https://www.postgresql.org/docs/12/ssl-tcp.html#SSL-CLIENT-CERTIFICATES](https://www.postgresql.org/docs/12/ssl-tcp.html#SSL-CLIENT-CERTIFICATES)",
"featurename": "通过有效的客户端 SSL/TLS 证书进行多因素身份验证",
"group_id": 6,
"id": 326,
"v10": 0,
"v11": 0,
"v12": 1,
"v13": 1,
"v14": 0,
"v15": 0,
"v16": 0,
"v17": 0,
"v18": 0,
"v74": 0,
"v80": 0,
"v81": 0,
"v82": 0,
"v83": 0,
"v84": 0,
"v90": 0,
"v91": 0,
"v92": 0,
"v93": 0,
"v94": 0,
"v95": 0,
"v96": 0
},
"Cells": [
{
"Version": "10",
"State": "no",
"EvidenceKind": "legacy-database:v10",
"TransitionVersion": "",
"Supported": false,
"Original": 0
},
{
"Version": "11",
"State": "no",
"EvidenceKind": "legacy-database:v11",
"TransitionVersion": "",
"Supported": false,
"Original": 0
},
{
"Version": "12",
"State": "yes",
"EvidenceKind": "legacy-database:v12",
"TransitionVersion": "",
"Supported": true,
"Original": 1
},
{
"Version": "13",
"State": "yes",
"EvidenceKind": "legacy-database:v13",
"TransitionVersion": "",
"Supported": true,
"Original": 1
},
{
"Version": "14",
"State": "no",
"EvidenceKind": "legacy-database:v14",
"TransitionVersion": "",
"Supported": false,
"Original": 0
},
{
"Version": "15",
"State": "no",
"EvidenceKind": "legacy-database:v15",
"TransitionVersion": "",
"Supported": false,
"Original": 0
},
{
"Version": "16",
"State": "no",
"EvidenceKind": "legacy-database:v16",
"TransitionVersion": "",
"Supported": false,
"Original": 0
},
{
"Version": "17",
"State": "no",
"EvidenceKind": "legacy-database:v17",
"TransitionVersion": "",
"Supported": false,
"Original": 0
},
{
"Version": "18",
"State": "no",
"EvidenceKind": "legacy-database:v18",
"TransitionVersion": "",
"Supported": false,
"Original": 0
},
{
"Version": "7.4",
"State": "no",
"EvidenceKind": "legacy-database:v74",
"TransitionVersion": "",
"Supported": false,
"Original": 0
},
{
"Version": "8.0",
"State": "no",
"EvidenceKind": "legacy-database:v80",
"TransitionVersion": "",
"Supported": false,
"Original": 0
},
{
"Version": "8.1",
"State": "no",
"EvidenceKind": "legacy-database:v81",
"TransitionVersion": "",
"Supported": false,
"Original": 0
},
{
"Version": "8.2",
"State": "no",
"EvidenceKind": "legacy-database:v82",
"TransitionVersion": "",
"Supported": false,
"Original": 0
},
{
"Version": "8.3",
"State": "no",
"EvidenceKind": "legacy-database:v83",
"TransitionVersion": "",
"Supported": false,
"Original": 0
},
{
"Version": "8.4",
"State": "no",
"EvidenceKind": "legacy-database:v84",
"TransitionVersion": "",
"Supported": false,
"Original": 0
},
{
"Version": "9.0",
"State": "no",
"EvidenceKind": "legacy-database:v90",
"TransitionVersion": "",
"Supported": false,
"Original": 0
},
{
"Version": "9.1",
"State": "no",
"EvidenceKind": "legacy-database:v91",
"TransitionVersion": "",
"Supported": false,
"Original": 0
},
{
"Version": "9.2",
"State": "no",
"EvidenceKind": "legacy-database:v92",
"TransitionVersion": "",
"Supported": false,
"Original": 0
},
{
"Version": "9.3",
"State": "no",
"EvidenceKind": "legacy-database:v93",
"TransitionVersion": "",
"Supported": false,
"Original": 0
},
{
"Version": "9.4",
"State": "no",
"EvidenceKind": "legacy-database:v94",
"TransitionVersion": "",
"Supported": false,
"Original": 0
},
{
"Version": "9.5",
"State": "no",
"EvidenceKind": "legacy-database:v95",
"TransitionVersion": "",
"Supported": false,
"Original": 0
},
{
"Version": "9.6",
"State": "no",
"EvidenceKind": "legacy-database:v96",
"TransitionVersion": "",
"Supported": false,
"Original": 0
}
],
"Texts": [
{
"Locale": "zh-Hans",
"Title": "通过有效的客户端 SSL/TLS 证书进行多因素身份验证",
"BodyHTML": "\u003cp\u003e如果 pg_hba.conf 中的身份验证条目指定了 \u003ccode\u003eclientcert=verify-full\u003c/code\u003e，则客户端必须提供与登录名匹配的有效 SSL 证书，或者基于映射的客户端名称。\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://www.postgresql.org/docs/12/ssl-tcp.html#SSL-CLIENT-CERTIFICATES\" rel=\"nofollow\"\u003ehttps://www.postgresql.org/docs/12/ssl-tcp.html#SSL-CLIENT-CERTIFICATES\u003c/a\u003e\u003c/p\u003e\n",
"SourceHash": "1b60429f05c473e0dfe69de281a58b7a2811e2b6dfe933cbd1c6a28b719a4c60",
"ContentHash": "5b645361965bcc9649badea138d9cf77688a8825275c5b70b3a0d89a20f66452",
"Payload": {
"description": "如果 pg_hba.conf 中的身份验证条目指定了 `clientcert=verify-full`，则客户端必须提供与登录名匹配的有效 SSL 证书，或者基于映射的客户端名称。\n\n[https://www.postgresql.org/docs/12/ssl-tcp.html#SSL-CLIENT-CERTIFICATES](https://www.postgresql.org/docs/12/ssl-tcp.html#SSL-CLIENT-CERTIFICATES)",
"name": "通过有效的客户端 SSL/TLS 证书进行多因素身份验证"
}
}
],
"GroupTitles": {
"zh-Hans": "安全"
},
"RelatedKey": "multifactor-authentication-via-valid-client-ssltls-certificate"
}