- PostgreSQL supports the whole set, except ``cipher-list``, additional
configuration must be done in the client library (libpq). Anything else must
be done in the PostgreSQL local configuration.
+
+For more details about securing the database connection, see :ref:`sec-database-connection`.
``config-write`` command) to the same directory as the config file used
when starting Kea (passed as a ``-c`` argument).
+.. _sec-database-connection:
+
Securing Database Connections
-----------------------------
Depending on the database configuration, it is also possible to verify whether the system user matches the
database username. Consult the MySQL or PostgreSQL manual for details.
-Kea supports client TLS settings for MySQL database and it must be
+Kea supports client SSL/TLS settings for MySQL database and it must be
configured explicitly for all used connections (configuration,
reservations, leases, forensic logging).