opensource/grafana
1
0
Fork 0
mirror of https://github.com/grafana/grafana.git synced 2025-08-01 00:02:33 +08:00
Code Issues Packages Projects Releases Wiki Activity

PostgreSQL: Fix the verify-ca mode (#85530)

Browse Source 
postgres: fix the verify-ca problem
This commit is contained in:
Gábor Farkas
2024-04-09 08:39:45 +02:00
committed by GitHub
parent 4f290ebf99
commit 8a15ed42ae
2 changed files with 17 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
pkg/tsdb/grafana-postgresql-datasource/postgres.go
View File

@ -224,6 +224,14 @@ func (s *Service) generateConnectionString(dsInfo sqleng.DataSourceInfo) (string
connStr += fmt.Sprintf(" sslmode='%s'", escape(tlsSettings.Mode))
// there is an issue with the lib/pq module, the `verify-ca` tls mode
// does not work correctly. ( see https://github.com/lib/pq/issues/1106 )
// to workaround the problem, if the `verify-ca` mode is chosen,
// we disable sslsni.
if tlsSettings.Mode == "verify-ca" {
connStr += " sslsni=0"
}
// Attach root certificate if provided
if tlsSettings.RootCertFile != "" {
logger.Debug("Setting server root certificate", "tlsRootCert", tlsSettings.RootCertFile)