Timeline for Is it safe to set rejectUnauthorized to false when using Heroku's Postgres database?
Current License: CC BY-SA 4.0
13 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 17, 2020 at 13:45 | vote | accept | Phyrik | ||
| May 5, 2020 at 21:01 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Apr 5, 2020 at 20:16 | answer | added | J c | timeline score: 5 | |
| Apr 5, 2020 at 15:40 | comment | added | Phyrik | Hmm...it isn't working. Same error as always | |
| Apr 5, 2020 at 15:30 | comment | added | bhorkarg | Yes. You should first download the postgres certificate to the nodejs server and then sent the path of the environment variable to that file, and restart the nodejs app. | |
| Apr 5, 2020 at 15:21 | comment | added | Phyrik | Would I just set that as an environment variable with the path to the certificate? | |
| Apr 5, 2020 at 15:10 | comment | added | bhorkarg | Yep, please do not disable certificate validation in production. Have you tried using the NODE_EXTRA_CA_CERTS_FILE variable on nodejs side? nodejs.org/api/cli.html#cli_node_extra_ca_certs_file . Save the postgres server certificate file on the nodejs server and set that env variable. | |
| Apr 5, 2020 at 15:04 | comment | added | Phyrik | And it will be production so yeah, I'll try to look for other ways around it. Any idea what I could do? | |
| Apr 5, 2020 at 15:03 | comment | added | Phyrik | It's on the server side - from Heroku's logs | |
| Apr 5, 2020 at 15:02 | comment | added | bhorkarg | Where are you getting this error - on the Postgres server or the client application? How safe is it do disable certification validation depends on your environment and threats faced. If it is a production environment, then DO NOT. | |
| Apr 5, 2020 at 15:01 | history | edited | Phyrik |
edited tags
|
|
| Apr 5, 2020 at 14:50 | review | First posts | |||
| Apr 5, 2020 at 16:38 | |||||
| Apr 5, 2020 at 14:46 | history | asked | Phyrik | CC BY-SA 4.0 |