Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for LibPQFactory to load root cert from the classpath #3132

Open
1 of 2 tasks
hmendesB2C2 opened this issue Feb 21, 2024 · 0 comments
Open
1 of 2 tasks

Add support for LibPQFactory to load root cert from the classpath #3132

hmendesB2C2 opened this issue Feb 21, 2024 · 0 comments

Comments

@hmendesB2C2
Copy link

I'm submitting a feature request

  • bug report
  • feature request

Describe the issue
At the moment the only way to provide the root certificates for LibPQFactory is by giving it the filesystem location of the file containing the root certs.
This approach has vulnerabilities because an attacker can modify the root certs file in the filesystem. Plus if the app receives the root cert from a channel other than the filesystem it forces the app to write the data to the filesystem in order for it to be used by LibPQFactory.

I propose that LibPQFactory can load the root certs from the classpath as well, basically in a manner similar to how its done by SingleCertValidatingFactory.

I'm available to raise a PR for it with a proposed implementation.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant