Support TLS Authentication for PostgreSQL connection

[vlaborie]

Hello,

I use Client Certificate for authenticating application to PostgreSQL database.

App who use client authentification do not need PostgreSQL password but need to define some postgresql parameters: sslmode, sslcert, sslkey and sslrootcert.

Some application permit to configure PostgreSQL connections directly as DSN, eg. postgresql://username:password@postgresql-host.localdomain:5432?sslmode=verifyfull&sslrootcert=ca.crt&sslcert=tls.crt&sslkey=tls.key

Both psycopg2 and asyncpg permit to configure theses parameters, can you add env variables to configure theses parameters or a env variable for directly configuring PostgreSQL DSN ?

Thank's,

[rkuo-danswer]

Thanks for bringing this up. We've done some work to ssl/tls enable other parts of the infra, so this sounds reasonable. We'll add it to our tracker.

[rkuo-danswer]

Tracking internally as DAN-848.