SSL connections are optional. CA verification not enforced.
AllowUnencryptedAndEncrypted
SSL connections are optional. CA verification not enforced.
EncryptedOnly
SSL connections are required. CA verification not enforced.
Require
SSL connections are required. CA verification not enforced.
Clients may use locally self-signed certificates (default psql client
behavior).
Unspecified
SSL mode is not specified. Defaults to ENCRYPTED_ONLY.
VerifyCa
SSL connections are required. CA verification enforced.
Clients must have certificates signed by a Cluster CA, for example, using
GenerateClientCertificate.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThe \u003ccode\u003eSslConfig.Types.SslMode\u003c/code\u003e enum in the AlloyDB v1alpha API provides options for configuring SSL connections, including whether they are optional or required.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eUnspecified\u003c/code\u003e mode defaults to \u003ccode\u003eENCRYPTED_ONLY\u003c/code\u003e, where SSL connections are required but CA verification is not enforced.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eVerifyCa\u003c/code\u003e mode mandates SSL connections and enforces CA verification, requiring clients to use certificates signed by a Cluster CA.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eAllow\u003c/code\u003e and \u003ccode\u003eAllowUnencryptedAndEncrypted\u003c/code\u003e mode indicate that SSL connections are optional and CA verification is not enforced.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eRequire\u003c/code\u003e mode mandates SSL connections and does not enforce CA verification, meaning clients may use self-signed certificates.\u003c/p\u003e\n"]]],[],null,[]]
