GetPGSSLMode is used only when SSL is enabled. We should consider allowing user to override this default in the future even if SSL is enabled.
(ds *storepb.DataSource)
| 221 | // GetPGSSLMode is used only when SSL is enabled. |
| 222 | // We should consider allowing user to override this default in the future even if SSL is enabled. |
| 223 | func GetPGSSLMode(ds *storepb.DataSource) SSLMode { |
| 224 | if !ds.GetVerifyTlsCertificate() { |
| 225 | return sslModeRequire |
| 226 | } |
| 227 | sslMode := sslModeVerifyFull |
| 228 | if ds.GetSslCa() != "" { |
| 229 | if ds.GetSshHost() != "" { |
| 230 | sslMode = sslModeVerifyCA |
| 231 | } |
| 232 | } |
| 233 | return sslMode |
| 234 | } |
| 235 | |
| 236 | // ApplyPGTLSConfig applies Bytebase TLS settings to pgx primary and fallback TLS configs. |
| 237 | func ApplyPGTLSConfig(tlscfg *tls.Config, host string, fallbacks []*pgconn.FallbackConfig) { |
no test coverage detected