can we enforce sslmode=require

[johnbritto1]

Hello,

How can we enforce sslmode=require in pgsql drivers in this.
Please assist.

Will a server configured as

'Test abc' => array(
'host' => '1.1.1.1:5400;sslmode=require',
'driver' => 'pgsql'
)

would work ?

[Samnan]

Hi John, I don't think it will work this way, it may require slight changes to the psql driver code, although i think it shouldn't be too difficult.

…

----------------------------- Samnan ur Rehman Consultant / Senior Software Developer about.me/samnan

On Wed, Jun 6, 2018 at 8:03 PM, John Britto ***@***.***> wrote: Hello, How can we enforce sslmode=require in pgsql drivers in this. Please assist. Will a server configured as 'Test abc' => array( 'host' => '1.1.1.1:5400;sslmode=require', 'driver' => 'pgsql' ) would work ? — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#49>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AA1SIOZLDdBwbb0vVNM249VID3PwPiUHks5t5-9ZgaJpZM4Uc03s> .

[johnbritto1]

Hi Samnan,

I think the SSL feature needs to be implemented in client side for auth security.
Because even we enforce hostssl on the pg_hba.conf in server side, pgpsql will first try connection via HTTP. Once the connection terminates, then it try again with HTTPS.