Using the trusted_certificates protocol option

This is the only required protocol option if TLS is specified in the Encryption connection parameter. Clients use the trusted_certificates encryption protocol option to specify trusted database server certificates. The trusted certificate can be a server's self-signed certificate, a public enterprise root certificate, or a certificate belonging to a commercial Certificate Authority.

See also