fix: enforce hostname checks only for verify-full

darora · soedirgo · commit f43f743c55d9 · 2024-02-05T11:15:37.000+08:00
diff --git a/src/lib/db.ts b/src/lib/db.ts
@@ -48,7 +48,7 @@ export const init: (config: PoolConfig) => {
       if (typeof config.ssl !== 'object') {
         config.ssl = {}
       }
-      config.ssl.rejectUnauthorized = sslmode !== 'no-verify'
+      config.ssl.rejectUnauthorized = sslmode === 'verify-full'
     }
   }
 

Original file line number	Diff line number	Diff line change
`@@ -48,7 +48,7 @@ export const init: (config: PoolConfig) => {`
`48`	`48`	`if (typeof config.ssl !== 'object') {`
`49`	`49`	`config.ssl = {}`
`50`	`50`	`}`
`51`		`- config.ssl.rejectUnauthorized = sslmode !== 'no-verify'`
	`51`	`+ config.ssl.rejectUnauthorized = sslmode === 'verify-full'`
`52`	`52`	`}`
`53`	`53`	`}`
`54`	`54`