Must generate_x509_certificate before postgresql.conf