Proper implementation of `sslmode=verify-full`

will / crystal-pg

a postgres driver for crystal

BSD 3-Clause "New" or "Revised" License

462 stars 77 forks source link

Proper implementation of `sslmode=verify-full` #240

Open cyangle opened 2 years ago

cyangle commented 2 years ago

Given a lot of people use cleartext auth method to connect to DBs hosted by Azure and CockroachLabs.

I think it's time to implement sslmode=verify-full to protect these use cases.

will commented 2 years ago

Yes, this would be a good feature, and I'd be happy to help someone write it.

steve-bitdotio commented 1 year ago

Does crystal-pg support sslmode=require? I am currently unable to connect to a database that requires SSL via crystal-pg and I am wondering if the issue is related.