SSL connection

[socketwiz]

With diesel I was able to configure my .env file like so:

DATABASE_URL=postgres://user:password@host/db?ssl=true
PGSSLCERT=/path/to/client-cert.pem
PGSSLKEY=/path/to/client-key.pem
PGSSLROOTCERT=/path/to/server-ca.pem

And diesel cli and rust APIs all just worked. I'm not having the same success with sqlx and I am not finding any documentation to help me move forward. How do I get SSL connections to work with postgres and sqlx?

[abonander]

PGSSLROOTCERT is supported, but PGSSLCERT and PGSSLKEY aren't yet. There's a PR open to add them but it's waiting on support being added to native-tls: #1166 (comment)

The URL parameter isn't ?ssl=true though. Try ?sslmode=require

[socketwiz]

Ah, thank you for the update. I've subscribed to pull request #166 . Hopefully that gets resolved soon.

[shadogar]

Looks like that PR has been merged, however when I attempt to use sqlx-cli to run migrations I get the following error

error: error occurred while attempting to establish a TLS connection: expected PKCS#8 PEM

However when I run the code (which connects by using the PGSSLCERT etc environment variables) everything works fine. It seems that the DATABASE_URL is not being parsed correctly?

[shadogar]

For context, my certs are already PEM formatted and I am using the tls-rustls-ring feature in sqlx version 0.8.1

[abonander]

sqlx-cli uses native-tls by default. Try cargo install --force sqlx-cli --no-default-features --features rustls,postgres,completions

[shadogar]

Ah thanks that fixes it!