Skip to content

Conversation

@jonkelleyatrackspace
Copy link

In my organization there's a need to pass additional parameters when dealing with SSL.

This allows opting for custom SSL Factories, defining the SSL verify mode, and allows the power of advanced configurations when dealing with SSL.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In some of our other modules we use the following pattern for this

 $jdbc_ssl_properties = "?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-full&sslrootcert=${localcacert}" 

That is to say maybe instead of the database_ssl bool there should just be a string args like jdbc_ssl_properties which we construct the subname from and database_ssl just equals jdbc_ssl_properties == ''.

@ajroetker
Copy link
Contributor

Closing in favor of ticketed work here https://tickets.puppetlabs.com/browse/PDB-1415.

@ajroetker ajroetker closed this Apr 8, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

2 participants