---
name: "pg_autoctl disable ssl"
section: "1"
platform: "linux"
package: "pg-auto-failover-cli"
version: "2.2-2"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/pg_autoctl disable ssl"
---

# pg\_autoctl disable ssl(1)

pg\_autoctl disable ssl pg\_autoctl disable ssl - Disable SSL configuration on this node

## NAME

pg\_autoctl disable ssl - pg\_autoctl disable ssl

pg\_autoctl disable ssl - Disable SSL configuration on this node

## SYNOPSIS

It is possible to manage Postgres SSL settings with the **pg\_autoctl** command, both at *pg\_autoctl create postgres* time and then again to change your mind and update the SSL settings at run-time.

```
 usage: pg_autoctl disable ssl  [ --pgdata ] [ --json ]
--pgdata      path to data directory
--ssl-self-signed setup network encryption using self signed certificates (does NOT protect against MITM)
--ssl-mode        use that sslmode in connection strings
--ssl-ca-file     set the Postgres ssl_ca_file to that file path
--ssl-crl-file    set the Postgres ssl_crl_file to that file path
--no-ssl          don't disable network encryption (NOT recommended, prefer --ssl-self-signed)
--server-key      set the Postgres ssl_key_file to that file path
--server-cert     set the Postgres ssl_cert_file to that file path
```

## OPTIONS

- **--pgdata**

  Location of the Postgres node being managed locally. Defaults to the environment variable **PGDATA**. Use **--monitor** to connect to a monitor from anywhere, rather than the monitor URI used by a local Postgres node managed with **pg\_autoctl**.

- **--ssl-self-signed**

  Generate SSL self-signed certificates to provide network encryption. This does not protect against man-in-the-middle kinds of attacks. See *Security settings for pg\_auto\_failover* for more about our SSL settings.

- **--ssl-mode**

  SSL Mode used by **pg\_autoctl** when connecting to other nodes, including when connecting for streaming replication.

- **--ssl-ca-file**

  Set the Postgres **ssl\_ca\_file** to that file path.

- **--ssl-crl-file**

  Set the Postgres **ssl\_crl\_file** to that file path.

- **--no-ssl**

  Don't disable network encryption. This is not recommended, prefer **--ssl-self-signed**.

- **--server-key**

  Set the Postgres **ssl\_key\_file** to that file path.

- **--server-cert**

  Set the Postgres **ssl\_cert\_file** to that file path.

## ENVIRONMENT

PGDATA

Postgres directory location. Can be used instead of the **--pgdata** option.

PG\_AUTOCTL\_MONITOR

Postgres URI to connect to the monitor node, can be used instead of the **--monitor** option.

XDG\_CONFIG\_HOME

The pg\_autoctl command stores its configuration files in the standard place XDG\_CONFIG\_HOME. See the *XDG Base Directory Specification*.

XDG\_DATA\_HOME

The pg\_autoctl command stores its internal states files in the standard place XDG\_DATA\_HOME, which defaults to **~/.local/share**. See the *XDG* *Base Directory Specification*.

## AUTHOR

Microsoft

## COPYRIGHT

Copyright (c) Microsoft Corporation. All rights reserved.