deadpool-postgres: SslMode does not support `verify-ca` and `verify-full`?

Open amitu opened this issue 2 years ago • 1 comments

As per PostgreSQL, the sslmode should be verify-ca or verify-full to get MITM protection. deadpool_postgres::SslMode only has prefer and require.

Are there plans to add the verify-full etc? Or I am reading this wrong altogether?

Oct 16 '23 05:10 amitu

This is an issue of the underlying tokio-postgres crate. deadpool-postgres merely mirrors the structures of tokio-postgres and adds support for (de)serialization via serde:

sfackler/rust-postgres#768

Oct 16 '23 08:10 bikeshedder

I'm closing this for the time being as it is blocked by sfackler/rust-postgres#768.

Jun 18 '24 22:06 bikeshedder