Add client-cert parameters of the Go pq driver to the Vikunja config #1161

Ghost · 2022-04-23T09:11:27Z

Ghost commented

2022-04-23 09:11:27 +00:00

First-time contributor

Description

I have one central PostgreSQL-Server and I would like the communication not only to be encrypted but also throw a client-cert against the postgres instance.

This change adds the "sslcert", "sslkey" and "sslrootcert" parameters of the Go pq driver to the Vikunja config.
Tested with a self-compiled binary on Fedora 35, PostgreSQL 13.6 on Rocky Linux 8.5 and the following options set:

unencrypted:
- database.sslmode: disabled
encrypted, no client-cert
- database.sslmode: verifiy-ca
- database.sslrootcert: /path/to/ca-cert
encrypted, client-cert:
- database.sslmode: verify-full
- database.sslcert: /path/to/client-cert
- database.sslkey: /path/to/client-key
- database.sslrootcert: /path/to/ca-cert

Checklist

I added or improved tests
I added or improved docs for my feature
- Swagger (including mage do-the-swag)
- Error codes
- New config options (including adding them to config.yml.saml and running mage generate-docs)

# Description I have one central PostgreSQL-Server and I would like the communication not only to be encrypted but also throw a client-cert against the postgres instance. This change adds the "sslcert", "sslkey" and "sslrootcert" parameters of the Go pq driver to the Vikunja config. Tested with a self-compiled binary on Fedora 35, PostgreSQL 13.6 on Rocky Linux 8.5 and the following options set: 1. unencrypted: * database.sslmode: disabled 2. encrypted, no client-cert * database.sslmode: verifiy-ca * database.sslrootcert: /path/to/ca-cert 3. encrypted, client-cert: * database.sslmode: verify-full * database.sslcert: /path/to/client-cert * database.sslkey: /path/to/client-key * database.sslrootcert: /path/to/ca-cert # Checklist * [ ] I added or improved tests * [x] I added or improved docs for my feature * [ ] Swagger (including `mage do-the-swag`) * [ ] Error codes * [x] New config options (including adding them to `config.yml.saml` and running `mage generate-docs`)

Ghost added 2 commits 2022-04-23 09:11:30 +00:00

9eab43e7ab Expose clientcert parameters of Go pq driver to config