awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-09-22 13:39:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

only parse out sslmode if it's equal to verify-ca, verify-full, or

Browse Source 
require
This commit is contained in:
x032205
2025-10-09 00:47:04 -04:00
parent 86fb8a665d
commit bb274c2d08
1 changed files with 9 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
backend/src/db/instance.ts
View File

@@ -32,11 +32,12 @@ export const initDbConnection = ({
return selectedReplica;
});
// Parse out ?sslmode=... from the connection URI if its not equal to "disable" and dbRootCert is defined
// Parse out ?sslmode=... from the connection URI if its equal to "verify-ca", "verify-full", or "require" and dbRootCert is defined
let modifiedDbConnectionUri = dbConnectionUri;
if (dbRootCert) {
const url = new URL(dbConnectionUri);
if (url.searchParams.has("sslmode") && url.searchParams.get("sslmode") !== "disable") {
const sslMode = url.searchParams.get("sslmode");
if (url.searchParams.has("sslmode") && sslMode && ["verify-ca", "verify-full", "require"].includes(sslMode)) {
url.searchParams.delete("sslmode");
modifiedDbConnectionUri = url.toString();
}
@@ -70,11 +71,12 @@ export const initDbConnection = ({
readReplicaDbs = readReplicas.map((el) => {
const replicaDbCertificate = el.dbRootCert || dbRootCert;
// Parse out ?sslmode=... from the connection URI if its not equal to "disable" and dbRootCert is defined
// Parse out ?sslmode=... from the connection URI if its equal to "verify-ca", "verify-full", or "require" and dbRootCert is defined
let modifiedReadReplicaDbConnectionUri = el.dbConnectionUri;
if (replicaDbCertificate) {
const url = new URL(el.dbConnectionUri);
if (url.searchParams.has("sslmode") && url.searchParams.get("sslmode") !== "disable") {
const sslMode = url.searchParams.get("sslmode");
if (url.searchParams.has("sslmode") && sslMode && ["verify-ca", "verify-full", "require"].includes(sslMode)) {
url.searchParams.delete("sslmode");
modifiedReadReplicaDbConnectionUri = url.toString();
}
@@ -108,11 +110,12 @@ export const initAuditLogDbConnection = ({
dbConnectionUri: string;
dbRootCert?: string;
}) => {
// Parse out ?sslmode=... from the connection URI if its not equal to "disable" and dbRootCert is defined
// Parse out ?sslmode=... from the connection URI if its equal to "verify-ca", "verify-full", or "require" and dbRootCert is defined
let modifiedDbConnectionUri = dbConnectionUri;
if (dbRootCert) {
const url = new URL(dbConnectionUri);
if (url.searchParams.has("sslmode") && url.searchParams.get("sslmode") !== "disable") {
const sslMode = url.searchParams.get("sslmode");
if (url.searchParams.has("sslmode") && sslMode && ["verify-ca", "verify-full", "require"].includes(sslMode)) {
url.searchParams.delete("sslmode");
modifiedDbConnectionUri = url.toString();
}