Hi, Quick Question: As it is suggested here (ref: ...
# help
m
Hi, Quick Question: As it is suggested here (ref: https://docs.lakefs.io/reference/configuration.html#reference), the connection string should have
ssl-disabled
when connecting to the DB. Is ssl enable not supported right now or this is just a recommendation and not a necessity ? Thanks
a
Hi! TLs is indeed fully supported (directly by the Go client)! The default is to connect to localhost, for testing. And it is not possible to identify localhost using a certificate from a public CA (and configuring it with a local CA would be a lot of work with no gain, as local PostgreSQL will be unsuitable for production use). So: go ahead and use ssl to connect to your database. This is not just supported, it is also recommended! The default is just for ease of testing on a small configuration.
m
Awesome, that makes sense. Thanks again @Ariel Shaqed (Scolnicov) 🎉
a
Sure! Connection strings are always so annoying to get right.