Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

vmq_diversity: dd useful SSL Client opts for Postgres #2284

Merged
merged 9 commits into from
May 21, 2024

Conversation

ioolkos
Copy link
Contributor

@ioolkos ioolkos commented May 16, 2024

Just as a quick example, in relation to #2282

Example config: (in addition to plugin/host/port configs)

vmq_diversity.postgres.ssl = on
vmq_diversity.postgres.ssl.verify = verify_peer
vmq_diversity.postgres.ssl.customize_hostname_check = https
vmq_diversity.postgres.ssl.depth = 10
vmq_diversity.postgres.ssl.use_system_cas = on

use_system_cas loads the system CA's; alternatively you can configure a cafile with:

vmq_diversity.postgres.ssl.cafile = path/to/ca.pem

vmq_diversity.postgres.ssl.customize_hostname_check = https switches hostname checks to https style, allowing for wildcard certs.

@ioolkos ioolkos marked this pull request as ready for review May 20, 2024 08:25
@ioolkos ioolkos merged commit b158f20 into main May 21, 2024
9 of 10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant