blocks|key|143503|text|您可以这样实现：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|143504|postgres://user:pass@host:port/database?ssl=true|code-block|syntax|javascript|143505|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

You can achieve this like this:

<pre><code>postgres://user:pass@host:port/database?ssl=true
</code></pre>

blocks|key|4650183|text|在从node-postgres创建新客户端时，您也可以使用以下代码|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|4650184|var+pg+=+require("pg");

var+client+=+new+pg.Client({
++user:+"yourUser",
++password:+"yourPass",
++database:+"yourDatabase",
++port:+5432,
++host:+"host.com",
++ssl:+true
});

client.connect();

var+query+=+client.query('CREATE+TABLE+people(id+SERIAL+PRIMARY+KEY,+name+VARCHAR(100)+not+null)');

query.on('row',+function(row)+{
++console.log(row.name);
});

query.on('end',+client.end.bind(client));|code-block|syntax|javascript|4650185|希望这能有所帮助！|4650186|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/brianc/node-postgres^0|2|D|0|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@$A|T|B|U|1|V]]|C|$]]|$1|D|3|E|5|F|7|W|8|@]|9|@]|C|$G|H]]|$1|I|3|J|5|6|7|X|8|@]|9|@]|C|$]]|$1|K|3|-4|5|6|7|Y|8|@]|9|@]|C|$]]]|L|$M|$5|N|O|P|C|$Q|R]]]]

You also can use this code below when create a new Client from <a href="https://github.com/brianc/node-postgres" rel="noreferrer">node-postgres</a>:

<pre><code>var pg = require("pg");

var client = new pg.Client({
 user: "yourUser",
 password: "yourPass",
 database: "yourDatabase",
 port: 5432,
 host: "host.com",
 ssl: true
});

client.connect();

var query = client.query('CREATE TABLE people(id SERIAL PRIMARY KEY, name VARCHAR(100) not null)');

query.on('row', function(row) {
 console.log(row.name);
});

query.on('end', client.end.bind(client));
</code></pre>

Hope this helps!

blocks|key|143553|text|对于Google+Cloud+PG和pg-promise，我也有类似的需求。我得到的错误(使用?ssl=true)是connection+requires+a+valid+client+certificate。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|143554|虽然没有记录pg-promise的SSL连接，但它是建立在node-postgres之上的。如链接中所述，ssl配置参数可以不仅仅是true|143555|const+pgp+=+require('pg-promise')();
const+fs+=+require('fs');

const+connectionConf+=+{
++++host:+'myhost.com',
++++port:+5432,
++++database:+'specific_db_name',
++++user:+'my_App_user',
++++password:+'aSecretePass',
++++ssl:+{
++++++++rejectUnauthorized+:+false,
++++++++ca+++:+fs.readFileSync("server-ca.pem").toString(),
++++++++key++:+fs.readFileSync("client-key.pem").toString(),
++++++++cert+:+fs.readFileSync("client-cert.pem").toString(),
++}

};
const+new_db+=+pgp(connectionConf);
new_db.any('SELECT+*+FROM+interesting_table_a+LIMIT+10')
++++.then(res+=>+{console.log(res);})
++++.catch(err+=>+{console.error(err);})
++++.then(()+=>+{new_db.$pool.end()});|code-block|syntax|javascript|143556|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/vitaly-t/pg-promise|1|https://node-postgres.com/features/ssl^0|1B|9|1M|1A|I|A|0|0|6|A|1H|3|1U|4|T|D|1|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@$9|X|A|Y|B|C]|$9|Z|A|10|B|C]]|D|@$9|11|A|12|1|13]]|E|$]]|$1|F|3|G|5|6|7|14|8|@$9|15|A|16|B|C]|$9|17|A|18|B|C]|$9|19|A|1A|B|C]]|D|@$9|1B|A|1C|1|1D]]|E|$]]|$1|H|3|I|5|J|7|1E|8|@]|D|@]|E|$K|L]]|$1|M|3|-4|5|6|7|1F|8|@]|D|@]|E|$]]]|N|$O|$5|P|Q|R|E|$S|T]]|U|$5|P|Q|R|E|$S|V]]]]

With Google Cloud PG and <a href="https://github.com/vitaly-t/pg-promise" rel="noreferrer">pg-promise</a> I had a similar need. 
The error I got (using <code>?ssl=true</code>) was <code>connection requires a valid client certificate</code>.

SSL connection is not documented for <code>pg-promise</code> but it is built on <a href="https://node-postgres.com/features/ssl" rel="noreferrer">node-postgres</a>. As explained in the link, the <code>ssl</code> config parameter can be more than just <code>true</code>:

<pre><code>const pgp = require('pg-promise')();
const fs = require('fs');

const connectionConf = {
 host: 'myhost.com',
 port: 5432,
 database: 'specific_db_name',
 user: 'my_App_user',
 password: 'aSecretePass',
 ssl: {
 rejectUnauthorized : false,
 ca : fs.readFileSync("server-ca.pem").toString(),
 key : fs.readFileSync("client-key.pem").toString(),
 cert : fs.readFileSync("client-cert.pem").toString(),
 }

};
const new_db = pgp(connectionConf);
new_db.any('SELECT * FROM interesting_table_a LIMIT 10')
 .then(res =&gt; {console.log(res);})
 .catch(err =&gt; {console.error(err);})
 .then(() =&gt; {new_db.$pool.end()});
</code></pre>

blocks|key|4650252|text|对于任何正在寻找TypeORM解决方案的人来说，它也是{ssl:+true}。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|4650253|完整示例：|4650254|​|4650255|const+connectionOptions:+PostgresConnectionOptions+=+{
++++name:+`default`,
++++type:+`postgres`,
++++url:+process.env.DATABASE_URL,
++++ssl:+process.env.DATABASE_SSL+===+`true`
}|code-block|syntax|javascript|4650256|4650257|entityMap^0|R|B|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|R|8|@$9|S|A|T|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|U|8|@]|D|@]|E|$]]|$1|H|3|I|5|6|7|V|8|@]|D|@]|E|$]]|$1|J|3|K|5|L|7|W|8|@]|D|@]|E|$M|N]]|$1|O|3|I|5|6|7|X|8|@]|D|@]|E|$]]|$1|P|3|-4|5|6|7|Y|8|@]|D|@]|E|$]]]|Q|$]]

For anybody looking for a TypeORM solution, it's also <code>{ssl: true}</code>.

Full example:

<div class="snippet" data-lang="js" data-hide="false" data-console="true" data-babel="false">
<div class="snippet-code">
<pre class="snippet-code-js lang-js prettyprint-override"><code>const connectionOptions: PostgresConnectionOptions = {
 name: `default`,
 type: `postgres`,
 url: process.env.DATABASE_URL,
 ssl: process.env.DATABASE_SSL === `true`
}</code></pre>
</div>
</div>

blocks|key|143592|text|我也有同样的问题。就目前而言，pg+>=+8.0.0存在一个问题。因此，如果您有此问题，请使用pg版本7及更低版本。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|143593|yarn+add+pg@7|code-block|syntax|javascript|143594|entityMap^0|F|B|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@$9|N|A|O|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|P|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|Q|8|@]|D|@]|E|$]]]|L|$]]

I have the same problem.
As for today, there is a problem with <code>pg &gt;= 8.0.0</code>.
So if you have this problem use pg version 7 and below.

<pre class="lang-sh prettyprint-override"><code>yarn add pg@7
</code></pre>

blocks|key|4650336|text|const+sequelize+=+new+Sequelize(
++++configuration.get("postgresConnectionString"),
++++{
++++++++logging:+false,
++++++++dialectOptions:+{
++++++++++++ssl:+{
++++++++++++++++ca:+fs.readFileSync(path.join(__dirname,+"/ssl/DigiCertGlobalRootG2.crt.pem")),
++++++++++++++++rejectUnauthorized:+true,
++++++++++++++++require:+true,
++++++++++++},
++++++++},
++++},
);|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|4650337|DigiCertGlobalRootG2.crt.pem:是2个密钥的组合(+BaltimoreCyberTrustRoot.crt.pem即将过期).One文件具有多个密钥，如-+BEGIN+CERTIFICATE+-BaltimoreCyberTrustRoot.crt.pem-+END+CERTIFICATE+-+BEGIN+CERTIFICATE+-END+CERTIFICATE-+DigiCertGlobalRootG2.crt.pem+-从node.js应用程序使用Sequelize+ORM连接到Azure+postgress。|unstyled|4650338|DigiCertGlobalRootG2.crt.pem:您将从Azure+portal获得它。|offset|length|4650339|注意:如果不使用任何密钥，则ssl配置如下：|4650340|const+sequelize+=+new+Sequelize(
++++configuration.get("postgresConnectionString"),
++++{
++++++++logging:+false,
++++++++dialectOptions:+{
++++++++++++ssl:+true,
++++++++},
++++},
);|4650341|注意:请检查connectionString以sslmode=require%7C%7C+ssl_ca=required:+https://docs.microsoft.com/en-us/azure/mysql/concepts-certificate-rotation结尾，在此基础上，请添加相应的SSL配置注意:您认为需要更改的内容，请告诉我|style|CODE|4650342|entityMap|0|LINK|mutability|MUTABLE|url|https://docs.microsoft.com/en-us/azure/mysql/concepts-certificate-rotation^0|0|0|W|C|0|0|0|0|6|G|N|31|0^^$0|@$1|2|3|4|5|6|7|10|8|@]|9|@]|A|$B|C]]|$1|D|3|E|5|F|7|11|8|@]|9|@]|A|$]]|$1|G|3|H|5|F|7|12|8|@]|9|@$I|13|J|14|1|15]]|A|$]]|$1|K|3|L|5|F|7|16|8|@]|9|@]|A|$]]|$1|M|3|N|5|6|7|17|8|@]|9|@]|A|$B|C]]|$1|O|3|P|5|F|7|18|8|@$I|19|J|1A|Q|R]|$I|1B|J|1C|Q|R]]|9|@]|A|$]]|$1|S|3|-4|5|F|7|1D|8|@]|9|@]|A|$]]]|T|$U|$5|V|W|X|A|$Y|Z]]]]

<pre><code>const sequelize = new Sequelize(
 configuration.get(&quot;postgresConnectionString&quot;),
 {
 logging: false,
 dialectOptions: {
 ssl: {
 ca: fs.readFileSync(path.join(__dirname, &quot;/ssl/DigiCertGlobalRootG2.crt.pem&quot;)),
 rejectUnauthorized: true,
 require: true,
 },
 },
 },
);
</code></pre>
DigiCertGlobalRootG2.crt.pem: Is a combination of 2 key for constitency(BaltimoreCyberTrustRoot.crt.pem gonna expiry soon).One file with multiple keys as
----- BEGIN CERTIFICATE -----
BaltimoreCyberTrustRoot.crt.pem
----- END CERTIFICATE -----
----- BEGIN CERTIFICATE -----
DigiCertGlobalRootG2.crt.pem
-----END CERTIFICATE-----
Connecting to Azure postgress from node.js application using Sequelize ORM with support of SSL. 
DigiCertGlobalRootG2.crt.pem: You will get it from the <a href="https://docs.microsoft.com/en-us/azure/mysql/concepts-certificate-rotation" rel="nofollow noreferrer">Azure portal</a>.
Note: If not using any key then ssl configuration is like this:
<pre><code>const sequelize = new Sequelize(
 configuration.get(&quot;postgresConnectionString&quot;),
 {
 logging: false,
 dialectOptions: {
 ssl: true,
 },
 },
);
</code></pre>
Note: Please check the <code>connectionString</code> ends with <code>sslmode=require|| ssl_ca=required: https://docs.microsoft.com/en-us/azure/mysql/concepts-certificate-rotation</code>, based this, please add SSL configuration accordingly
Note: The content you feel need a change , please let me know

blocks|key|4650370|text|如果您正在使用AWS+RDS+Proxy+for+Postgresql，那么ssl:+true就足够了。完整的例子在这里|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|4650371|let+getConnection+=+async+()+=>+{
++++let+connParam+=+{
++++++++host:+{RDS_PROXY_URL},
++++++++port:+{PORT},
++++++++user:+{USERNAME},
++++++++database+:+{DB_ANME},
++++++++password:+{PASSWORD},
++++++++ssl:+true
++++};
++++
++++let+pgClient+=+new+pg.Client(connParam);

++++await+pgClient.connect();

++++return+pgClient;
}|code-block|syntax|javascript|4650372|entityMap^0|12|9|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@$9|N|A|O|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|P|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|Q|8|@]|D|@]|E|$]]]|L|$]]

If you are using AWS RDS Proxy for Postgresql then <code>ssl: true</code> is sufficient. complete example is here
<pre><code>let getConnection = async () =&gt; {
 let connParam = {
 host: {RDS_PROXY_URL},
 port: {PORT},
 user: {USERNAME},
 database : {DB_ANME},
 password: {PASSWORD},
 ssl: true
 };
 
 let pgClient = new pg.Client(connParam);

 await pgClient.connect();

 return pgClient;
}
</code></pre>

I am trying to connect to my Heroku PostgreSQL DB and I keep getting an SSL error. Does anyone have an idea on how to enable SSL in the connection string?

<pre><code>postgres://user:pass@host:port/database;
</code></pre>

Been looking for it everywhere but it does not seem to be a very popular topic.
By the way, I am running Nodejs and the node-pg module with its connection-pooled method:

<pre><code>pg.connect(connString, function(err, client, done) {
 // Should work.
});
</code></pre>

Comments are much appreciated.

SSL for PostgreSQL connection nodejs

PostgreSQL

我正在尝试连接到我的Heroku，但我一直收到PostgreSQL错误。有人知道如何在连接字符串中启用SSL吗？postgres://user:pass@host:port/database;我一直在到处寻找它，但它似乎不是一个很受欢迎的话题。顺便说一下，我正在运行Nodejs和node-pg模块及其连接池方法：pg....

问用于PostgreSQL连接节点的SSL
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问用于PostgreSQL连接节点的SSLEN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问用于PostgreSQL连接节点的SSL
EN