Connections over SSL?

[coderfromhere]

Hi, I wonder how one would have this with hasql?

[nikita-volkov]

Hi. I've actually never explored this.

I suggest to consult the "libpq" docs on that part (the C library, that Hasql is built on top of). It's likely you'll be able to achieve what you want by explicitly providing an accordingly formatted bytestring to the acquire function instead of what the settings function produces.

Please post back on how it goes.

[coderfromhere]

Hi! I'm going to work it out this week as I need it for my org's infra, would you accept a pull request that would extend the current settings struct with an extra field sslmode=disable? It would be equivalent to the current behaviour but more explicitly so.

[nikita-volkov]

I suggest to discuss how we can extend the API to provide explicit support for SSL instead.

[coderfromhere]

ok, I'm going to test this configuration option passed directly to the underlying libpq wrapper as an extended bytestring first.

[mbj]

I can confirm I'm using the sslmode=require or stronger like sslmode=verify-full in production these days. It instructs the libpq do "do the right thing". Its AFAIK transparent from the perspective of hasql.