Specify CA certificate manually

[baoshan]

With deno-postgres, I can specify a .crt file (e.g., supabase.crt), and sslmode=require works (tested just now).

Is this an option for Postgres.js?

[porsager]

Yes indeed it is, just use caCerts options as specified in the deno docs in your ssl object like this:

const sql = postgres(url, {
  ssl: {
    caCerts: [await Deno.readTextFile('./cert.pem')]
  }
})

[ralfstx]

BTW, in Node.js you can use { ssl: { ca: [ fs.readFileSync('server-cert.pem') ] }}, see https://nodejs.org/api/tls.html

[oscar6echo]

I tried #571 (comment)

Unfortunately it does not seem to work for a postgresql db on azure (at least).
Cf. denoland/deno#28903

From the postgres lib point of view, is there a workaround ? even hacky !

[oscar6echo]

From the postgres lib point of view, is there a workaround ? even hacky !

Upon further investigation this is independent of the posgres lib.