Skip to content

postgres: use cert config in make_tls #6803

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
May 24, 2021
Merged

Conversation

uce
Copy link
Contributor

@uce uce commented May 20, 2021

This is based on changes in MaterializeInc/rust-postgres#2.


Returns a MakeTlsConnector that matches the semantics of the Postgres client for SSL connections.

In contrast to the earlier PR, we now specify the ssl config in the connection string, similar to the Postgres client:

CREATE MATERIALIZED SOURCE "mz_source"
FROM POSTGRES
HOST 'host=postgres user=mz dbname=mz sslmode=verify-full sslcert=/share/secrets/mz.crt sslkey=/share/secrets/mz.key sslrootcert=/share/secrets/ca.crt'
PUBLICATION 'mz_source'

Check out https://www.postgresql.org/docs/current/libpq-ssl.html for more details on the expected behavior.

@uce uce requested a review from petrosagg May 20, 2021 09:52
uce added 2 commits May 24, 2021 11:54
Returns a `MakeTlsConnector` that matches the semantics of the Postgres
client for SSL connections.

Check out https://www.postgresql.org/docs/current/libpq-ssl.html for
more details on the expected behavior.
Adds tests for cert auth and verification.
@uce uce merged commit 64ebb0c into MaterializeInc:main May 24, 2021
@uce uce deleted the 6716-certs branch May 24, 2021 10:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants