</code> to the appropriate
   <code class="literal">hostssl</code> line(s) in <code class="filename">pg_hba.conf</code>.
   A certificate will then be requested from the client during SSL
   connection startup.  (See <a class="xref" href="libpq-ssl.html" title="34.19. SSL Support">Section 34.19</a> for a description
   of how to set up certificates on the client.)
  </p><p>
   For a <code class="literal">hostssl</code> entry with
   <code class="literal">clientcert=verify-ca</code>, the server will verify