Parameter · Preset Options
ssl_library
Shows the name of the SSL library.
- Default:
OpenSSL - Type: string
- Applies: Read-only
In plain words
Shows which TLS library the server was compiled against, normally OpenSSL. If it is empty, this build cannot do encrypted connections at all.
For DBAs and operators
Fixed at build time (--with-ssl=openssl). It tells you only that SSL support exists, not that it is enabled: check ssl = on and look at pg_stat_ssl for actual encrypted sessions. The library version (relevant for TLS 1.3 and cipher support) is not shown by PostgreSQL itself; check the linked library, e.g. ldd $(which postgres) | grep ssl.
How to change it
Fixed when PostgreSQL was built or the cluster was initialised. You can only read it.