can we enforce sslmode=require

[johnbritto1]

Hello,

How can we enforce sslmode=require in pgsql drivers in this. Please assist.

Will a server configured as

'Test abc' => array( 'host' => '1.1.1.1:5400;sslmode=require', 'driver' => 'pgsql' )

would work ?

[Samnan]

Hi John,

I don't think it will work this way, it may require slight changes to the psql driver code, although i think it shouldn't be too difficult.

---

Samnan ur Rehman Consultant / Senior Software Developer about.me/samnan

On Wed, Jun 6, 2018 at 8:03 PM, John Britto [email protected] wrote:

Hello,

How can we enforce sslmode=require in pgsql drivers in this. Please assist.

Will a server configured as

'Test abc' => array( 'host' => '1.1.1.1:5400;sslmode=require', 'driver' => 'pgsql' )

would work ?

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/Samnan/MyWebSQL/issues/49, or mute the thread https://github.com/notifications/unsubscribe-auth/AA1SIOZLDdBwbb0vVNM249VID3PwPiUHks5t5-9ZgaJpZM4Uc03s .

[johnbritto1]

Hi Samnan,

I think the SSL feature needs to be implemented in client side for auth security. Because even we enforce hostssl on the pg_hba.conf in server side, pgpsql will first try connection via HTTP. Once the connection terminates, then it try again with HTTPS.