Sitelet https://github.com/npgsql/npgsql/pull/4005
Skip to content

Add SslMode.Allow, VerifyCA and VerifyFull - #4005

Merged
vonzshik merged 8 commits into
npgsql:mainfrom
vonzshik:ssl-validation-rewrite
Oct 4, 2021
Merged

vonzshik merged 8 commits into
npgsql:mainfrom
vonzshik:ssl-validation-rewrite

Conversation

@vonzshik

@vonzshik vonzshik commented Oct 3, 2021 •

Copy link
Copy Markdown
Contributor

Closes #3684
Closes #3652
Closes #3988
Closes #4008

@vonzshik
vonzshik requested a review from roji as a code owner October 3, 2021 17:34
@vonzshik
vonzshik force-pushed the ssl-validation-rewrite branch 10 times, most recently from c2dca8b to 8830e77 Compare October 3, 2021 21:25
@vonzshik
vonzshik force-pushed the ssl-validation-rewrite branch from 8830e77 to ef00bcd Compare October 3, 2021 21:30

@roji roji left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Here you go @vonzshik. Looks good, but I think it does an earlier state of the discussion - in the end I think we agreed to require TSC=true when SslMode=Require (and not allow TSC=false). I think this means we don't need to make TSC nullable.

Just out of the curiosity, why did the self-signed certificate/key under .build need to be replaced?

/cc @NinoFloris

Comment thread src/Npgsql/Internal/NpgsqlConnector.cs Outdated
Comment thread src/Npgsql/Internal/NpgsqlConnector.cs Outdated
Comment thread src/Npgsql/Internal/NpgsqlConnector.cs Outdated
Comment thread .github/workflows/build.yml
Comment thread src/Npgsql/Internal/NpgsqlConnector.cs Outdated
Comment thread src/Npgsql/NpgsqlConnectionStringBuilder.cs Outdated
Comment thread src/Npgsql/NpgsqlConnectionStringBuilder.cs Outdated
Comment thread src/Npgsql/NpgsqlConnectionStringBuilder.cs Outdated
Comment thread src/Npgsql/NpgsqlConnectionStringBuilder.cs Outdated
Comment thread test/Npgsql.Tests/SecurityTests.cs Outdated
@vonzshik
vonzshik force-pushed the ssl-validation-rewrite branch from 03ab21e to 142594c Compare October 4, 2021 09:27
@vonzshik
vonzshik force-pushed the ssl-validation-rewrite branch from b790bab to 82983e1 Compare October 4, 2021 10:00
@vonzshik
vonzshik requested a review from roji October 4, 2021 10:21

@roji roji left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just one last thing we forgot - can merge directly after fixing.

Comment thread src/Npgsql/NpgsqlConnectionStringBuilder.cs
Comment thread test/Npgsql.Tests/SecurityTests.cs Outdated
@vonzshik
vonzshik requested a review from roji October 4, 2021 15:07
@vonzshik
vonzshik merged commit 7ac49cc into npgsql:main Oct 4, 2021
@vonzshik
vonzshik deleted the ssl-validation-rewrite branch October 4, 2021 15:27

@baal2000 baal2000 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One small comment for NpgsqlConnectionStringBuilder.Generated.cs that I may or may not be an "issue".

Comment thread src/Npgsql/Generated/NpgsqlConnectionStringBuilder.Generated.cs
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

3 participants