REVOKE SSL TRUST ​

Revoke the SSL trust configuration on the system.

REVOKE { 'hash' | ALL } FROM SSL TRUST

Non-superusers must have sysadmin (or consumeradmin) membership in order to run SSL trust commands.

'hash'

Revoke an SSL certificate from the system trust store. Use the SHOW SSL TRUST command to display certificates and determine the hash value.

ALL

Revoke all SSL certificates from the system trust store.

For example:

premdb=# revoke all from ssl trust;
REVOKE SSL TRUST

premdb=# revoke '2de2f78e.0' from ssl trust;
REVOKE SSL TRUST