How to connect to sslmode=require

[factormaarten]

Hi there,

I'm wondering how I can add ?sslmode=require to the library?

I've tried uncommenting this in Connection.php but it doesn't work unfortunately:

                // $ssl = new SSLRequest();
                // $stream->write($ssl->encodedMessage());

Thank you so much!

[WyriHaximus]

Same question, but looking at the code this might be a bit more work than that. /cc @mbonneau @davidwdan

[WyriHaximus]

Just got it working locally, it requires changes in both this package and in react/socket to work as the TLS encryption is added to the connection after an SSLRequest command is sent to the PG server and it responded back positively. On top of that, I probably going to add support for URI parsing to get the query out in an easy way. Will have a chat with @clue and how we can add support for enabling the encryption later on in react/socket because everything to do this is already there, except adding later than right away on the connection.

I'll toss some more time at it now to get it working for now, and test it out in a project before I start creating PR's.

Refs:

• https://www.postgresql.org/docs/current/protocol-flow.html#id-1.10.6.7.12
• https://www.postgresql.org/docs/11/protocol-message-formats.html
• https://postgrespro.com/list/thread-id/2509446

[WyriHaximus]

My comment on react/socket about this: reactphp/socket#89 (comment)

[WyriHaximus]

Opened the WIP PR for this side on it, opening the react/socket PR for it later this weekend: #52

[WyriHaximus]

FYI, this has landed through #52 in 2.1.0