archive-gh-me/node-postgres
1
0
Fork 0
mirror of https://github.com/brianc/node-postgres.git synced 2025-12-08 20:16:25 +00:00
Code Issues Projects Releases Wiki Activity

Cleanup & comments

Browse Source
This commit is contained in:
Brian M. Carlson 2020-05-05 11:03:29 -05:00
parent b89eb0f81d
commit e9073f5a00
1 changed files with 10 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
packages/pg/lib/connection-parameters.js
View File

@ -25,9 +25,11 @@ var val = function (key, config, envVar) {
return config[key] || envVar || defaults[key]
}
var useSsl = function (modeFromConfig) {
var normalizeSSLConfig = function (modeFromConfig) {
// if the ssl parameter passed to config is not a string, just return it
// directly (it will be passed directly to tls.connect)
// this way you can pass all the ssl params in via constructor:
// new Client({ ssl: { minDHSize: 1024 } }) etc
if (modeFromConfig !== undefined && typeof modeFromConfig !== 'string') {
return modeFromConfig
}
@ -41,6 +43,11 @@ var useSsl = function (modeFromConfig) {
case 'verify-ca':
case 'verify-full':
return true
// no-verify is not standard to libpq but allows specifying
// you require ssl but want to bypass server certificate validation.
// this is a very common way to connect in heroku so we support it
// vai both environment variables (PGSSLMODE=no-verify) as well
// as in connection string params ?ssl=no-verify
case 'no-verify':
return { rejectUnauthorized: false }
}
@ -77,8 +84,8 @@ var ConnectionParameters = function (config) {
})
this.binary = val('binary', config)
// this.ssl = typeof config.ssl === 'undefined' ? useSsl() : config.ssl
this.ssl = useSsl(config.ssl)
this.ssl = normalizeSSLConfig(config.ssl)
this.client_encoding = val('client_encoding', config)
this.replication = val('replication', config)
// a domain socket begins with '/'