Type: string
Context: sighup
Restart: false
Since: 9.2

Specifies the name of the file containing the SSL server certificate authority (CA). Relative paths are relative to the data directory. This parameter can only be set in the postgresql.conf file or on the server command line. The default is empty, meaning no CA file is loaded, and client certificate verification is not performed.

Recommendations

You should always use SSL connections if you can. However, this does require setting up SSL.

Comments