Skip to content

Equivalent of PgBouncer client_tls_sslmode configuration #633

Open
@psiniemi

Description

@psiniemi

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

I want to avoid the situation where a configuration error sends sensitive data in cleartext over the network. Instead, cleartext communication should be rejected.

Describe the solution you'd like
A clear and concise description of what you want to happen.

I would like a configuration option like the client_tls_sslmode in PgBouncer that I can set to "require" to achieve what I want.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

I could do SSL offloading in front of PgCat, but that adds unnecessary complexity.

Additional context
Add any other context or screenshots about the feature request here.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions