@@ -154,10 +154,11 @@ connect :: ConnectInfo -> IO Connection
154154connect = connectPostgreSQL . postgreSQLConnectionString
155155
156156-- | Attempt to make a connection based on a libpq connection string.
157- -- See <http ://www.postgresql.org/docs/9.3 /static/libpq-connect.html#LIBPQ-CONNSTRING>
157+ -- See <https ://www.postgresql.org/docs/9.5 /static/libpq-connect.html#LIBPQ-CONNSTRING>
158158-- for more information. Also note that environment variables also affect
159159-- parameters not provided, parameters provided as the empty string, and a
160- -- few other things; see <http://www.postgresql.org/docs/9.3/static/libpq-envars.html>
160+ -- few other things; see
161+ -- <https://www.postgresql.org/docs/9.5/static/libpq-envars.html>
161162-- for details. Here is an example with some of the most commonly used
162163-- parameters:
163164--
@@ -188,7 +189,7 @@ connect = connectPostgreSQL . postgreSQLConnectionString
188189-- Omitting @password@ will default to an appropriate password found
189190-- in the @pgpass@ file, or no password at all if a matching line is
190191-- not found. See
191- -- <http ://www.postgresql.org/docs/9.3 /static/libpq-pgpass.html> for
192+ -- <https ://www.postgresql.org/docs/9.5 /static/libpq-pgpass.html> for
192193-- more information regarding this file.
193194--
194195-- As all parameters are optional and the defaults are sensible, the
@@ -206,18 +207,20 @@ connect = connectPostgreSQL . postgreSQLConnectionString
206207-- or production machines, or you will need to use a @pgpass@ file
207208-- with the @password@ or @md5@ authentication methods.
208209--
209- -- See <http ://www.postgresql.org/docs/9.3 /static/client-authentication.html>
210+ -- See <https ://www.postgresql.org/docs/9.5 /static/client-authentication.html>
210211-- for more information regarding the authentication process.
211212--
212213-- SSL/TLS will typically "just work" if your postgresql server supports or
213214-- requires it. However, note that libpq is trivially vulnerable to a MITM
214- -- attack without setting additional SSL parameters in the connection string.
215- -- In particular, @sslmode@ needs to be set to @require@, @verify-ca@, or
215+ -- attack without setting additional SSL connection parameters. In
216+ -- particular, @sslmode@ needs to be set to @require@, @verify-ca@, or
216217-- @verify-full@ in order to perform certificate validation. When @sslmode@
217218-- is @require@, then you will also need to specify a @sslrootcert@ file,
218219-- otherwise no validation of the server's identity will be performed.
219220-- Client authentication via certificates is also possible via the
220- -- @sslcert@ and @sslkey@ parameters.
221+ -- @sslcert@ and @sslkey@ parameters. See
222+ -- <https://www.postgresql.org/docs/9.5/static/libpq-ssl.html>
223+ -- for detailed information regarding libpq and SSL.
221224
222225connectPostgreSQL :: ByteString -> IO Connection
223226connectPostgreSQL connstr = do
0 commit comments