blocks|key|143503|text|您可以这样实现：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|143504|postgres://user:pass@host:port/database?ssl=true|code-block|syntax|javascript|143505|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

You can achieve this like this:

<pre><code>postgres://user:pass@host:port/database?ssl=true
</code></pre>

blocks|key|4650183|text|在从node-postgres创建新客户端时，您也可以使用以下代码|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|4650184|var+pg+=+require("pg");

var+client+=+new+pg.Client({
++user:+"yourUser",
++password:+"yourPass",
++database:+"yourDatabase",
++port:+5432,
++host:+"host.com",
++ssl:+true
});

client.connect();

var+query+=+client.query('CREATE+TABLE+people(id+SERIAL+PRIMARY+KEY,+name+VARCHAR(100)+not+null)');

query.on('row',+function(row)+{
++console.log(row.name);
});

query.on('end',+client.end.bind(client));|code-block|syntax|javascript|4650185|希望这能有所帮助！|4650186|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/brianc/node-postgres^0|2|D|0|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@$A|T|B|U|1|V]]|C|$]]|$1|D|3|E|5|F|7|W|8|@]|9|@]|C|$G|H]]|$1|I|3|J|5|6|7|X|8|@]|9|@]|C|$]]|$1|K|3|-4|5|6|7|Y|8|@]|9|@]|C|$]]]|L|$M|$5|N|O|P|C|$Q|R]]]]

You also can use this code below when create a new Client from <a href="https://github.com/brianc/node-postgres" rel="noreferrer">node-postgres</a>:

<pre><code>var pg = require("pg");

var client = new pg.Client({
 user: "yourUser",
 password: "yourPass",
 database: "yourDatabase",
 port: 5432,
 host: "host.com",
 ssl: true
});

client.connect();

var query = client.query('CREATE TABLE people(id SERIAL PRIMARY KEY, name VARCHAR(100) not null)');

query.on('row', function(row) {
 console.log(row.name);
});

query.on('end', client.end.bind(client));
</code></pre>

Hope this helps!

blocks|key|143553|text|对于Google+Cloud+PG和pg-promise，我也有类似的需求。我得到的错误(使用?ssl=true)是connection+requires+a+valid+client+certificate。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|143554|虽然没有记录pg-promise的SSL连接，但它是建立在node-postgres之上的。如链接中所述，ssl配置参数可以不仅仅是true|143555|const+pgp+=+require('pg-promise')();
const+fs+=+require('fs');

const+connectionConf+=+{
++++host:+'myhost.com',
++++port:+5432,
++++database:+'specific_db_name',
++++user:+'my_App_user',
++++password:+'aSecretePass',
++++ssl:+{
++++++++rejectUnauthorized+:+false,
++++++++ca+++:+fs.readFileSync("server-ca.pem").toString(),
++++++++key++:+fs.readFileSync("client-key.pem").toString(),
++++++++cert+:+fs.readFileSync("client-cert.pem").toString(),
++}

};
const+new_db+=+pgp(connectionConf);
new_db.any('SELECT+*+FROM+interesting_table_a+LIMIT+10')
++++.then(res+=>+{console.log(res);})
++++.catch(err+=>+{console.error(err);})
++++.then(()+=>+{new_db.$pool.end()});|code-block|syntax|javascript|143556|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/vitaly-t/pg-promise|1|https://node-postgres.com/features/ssl^0|1B|9|1M|1A|I|A|0|0|6|A|1H|3|1U|4|T|D|1|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@$9|X|A|Y|B|C]|$9|Z|A|10|B|C]]|D|@$9|11|A|12|1|13]]|E|$]]|$1|F|3|G|5|6|7|14|8|@$9|15|A|16|B|C]|$9|17|A|18|B|C]|$9|19|A|1A|B|C]]|D|@$9|1B|A|1C|1|1D]]|E|$]]|$1|H|3|I|5|J|7|1E|8|@]|D|@]|E|$K|L]]|$1|M|3|-4|5|6|7|1F|8|@]|D|@]|E|$]]]|N|$O|$5|P|Q|R|E|$S|T]]|U|$5|P|Q|R|E|$S|V]]]]

With Google Cloud PG and <a href="https://github.com/vitaly-t/pg-promise" rel="noreferrer">pg-promise</a> I had a similar need. 
The error I got (using <code>?ssl=true</code>) was <code>connection requires a valid client certificate</code>.

SSL connection is not documented for <code>pg-promise</code> but it is built on <a href="https://node-postgres.com/features/ssl" rel="noreferrer">node-postgres</a>. As explained in the link, the <code>ssl</code> config parameter can be more than just <code>true</code>:

<pre><code>const pgp = require('pg-promise')();
const fs = require('fs');

const connectionConf = {
 host: 'myhost.com',
 port: 5432,
 database: 'specific_db_name',
 user: 'my_App_user',
 password: 'aSecretePass',
 ssl: {
 rejectUnauthorized : false,
 ca : fs.readFileSync("server-ca.pem").toString(),
 key : fs.readFileSync("client-key.pem").toString(),
 cert : fs.readFileSync("client-cert.pem").toString(),
 }

};
const new_db = pgp(connectionConf);
new_db.any('SELECT * FROM interesting_table_a LIMIT 10')
 .then(res =&gt; {console.log(res);})
 .catch(err =&gt; {console.error(err);})
 .then(() =&gt; {new_db.$pool.end()});
</code></pre>

blocks|key|4650252|text|对于任何正在寻找TypeORM解决方案的人来说，它也是{ssl:+true}。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|4650253|完整示例：|4650254|​|4650255|const+connectionOptions:+PostgresConnectionOptions+=+{
++++name:+`default`,
++++type:+`postgres`,
++++url:+process.env.DATABASE_URL,
++++ssl:+process.env.DATABASE_SSL+===+`true`
}|code-block|syntax|javascript|4650256|4650257|entityMap^0|R|B|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|R|8|@$9|S|A|T|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|U|8|@]|D|@]|E|$]]|$1|H|3|I|5|6|7|V|8|@]|D|@]|E|$]]|$1|J|3|K|5|L|7|W|8|@]|D|@]|E|$M|N]]|$1|O|3|I|5|6|7|X|8|@]|D|@]|E|$]]|$1|P|3|-4|5|6|7|Y|8|@]|D|@]|E|$]]]|Q|$]]

For anybody looking for a TypeORM solution, it's also <code>{ssl: true}</code>.

Full example:

<div class="snippet" data-lang="js" data-hide="false" data-console="true" data-babel="false">
<div class="snippet-code">
<pre class="snippet-code-js lang-js prettyprint-override"><code>const connectionOptions: PostgresConnectionOptions = {
 name: `default`,
 type: `postgres`,
 url: process.env.DATABASE_URL,
 ssl: process.env.DATABASE_SSL === `true`
}</code></pre>
</div>
</div>

blocks|key|143592|text|我也有同样的问题。就目前而言，pg+>=+8.0.0存在一个问题。因此，如果您有此问题，请使用pg版本7及更低版本。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|143593|yarn+add+pg@7|code-block|syntax|javascript|143594|entityMap^0|F|B|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@$9|N|A|O|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|P|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|Q|8|@]|D|@]|E|$]]]|L|$]]

I have the same problem.
As for today, there is a problem with <code>pg &gt;= 8.0.0</code>.
So if you have this problem use pg version 7 and below.

<pre class="lang-sh prettyprint-override"><code>yarn add pg@7
</code></pre>

blocks|key|4650336|text|const+sequelize+=+new+Sequelize(
++++configuration.get("postgresConnectionString"),
++++{
++++++++logging:+false,
++++++++dialectOptions:+{
++++++++++++ssl:+{
++++++++++++++++ca:+fs.readFileSync(path.join(__dirname,+"/ssl/DigiCertGlobalRootG2.crt.pem")),
++++++++++++++++rejectUnauthorized:+true,
++++++++++++++++require:+true,
++++++++++++},
++++++++},
++++},
);|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|4650337|DigiCertGlobalRootG2.crt.pem:是2个密钥的组合(+BaltimoreCyberTrustRoot.crt.pem即将过期).One文件具有多个密钥，如-+BEGIN+CERTIFICATE+-BaltimoreCyberTrustRoot.crt.pem-+END+CERTIFICATE+-+BEGIN+CERTIFICATE+-END+CERTIFICATE-+DigiCertGlobalRootG2.crt.pem+-从node.js应用程序使用Sequelize+ORM连接到Azure+postgress。|unstyled|4650338|DigiCertGlobalRootG2.crt.pem:您将从Azure+portal获得它。|offset|length|4650339|注意:如果不使用任何密钥，则ssl配置如下：|4650340|const+sequelize+=+new+Sequelize(
++++configuration.get("postgresConnectionString"),
++++{
++++++++logging:+false,
++++++++dialectOptions:+{
++++++++++++ssl:+true,
++++++++},
++++},
);|4650341|注意:请检查connectionString以sslmode=require%7C%7C+ssl_ca=required:+https://docs.microsoft.com/en-us/azure/mysql/concepts-certificate-rotation结尾，在此基础上，请添加相应的SSL配置注意:您认为需要更改的内容，请告诉我|style|CODE|4650342|entityMap|0|LINK|mutability|MUTABLE|url|https://docs.microsoft.com/en-us/azure/mysql/concepts-certificate-rotation^0|0|0|W|C|0|0|0|0|6|G|N|31|0^^$0|@$1|2|3|4|5|6|7|10|8|@]|9|@]|A|$B|C]]|$1|D|3|E|5|F|7|11|8|@]|9|@]|A|$]]|$1|G|3|H|5|F|7|12|8|@]|9|@$I|13|J|14|1|15]]|A|$]]|$1|K|3|L|5|F|7|16|8|@]|9|@]|A|$]]|$1|M|3|N|5|6|7|17|8|@]|9|@]|A|$B|C]]|$1|O|3|P|5|F|7|18|8|@$I|19|J|1A|Q|R]|$I|1B|J|1C|Q|R]]|9|@]|A|$]]|$1|S|3|-4|5|F|7|1D|8|@]|9|@]|A|$]]]|T|$U|$5|V|W|X|A|$Y|Z]]]]

<pre><code>const sequelize = new Sequelize(
 configuration.get(&quot;postgresConnectionString&quot;),
 {
 logging: false,
 dialectOptions: {
 ssl: {
 ca: fs.readFileSync(path.join(__dirname, &quot;/ssl/DigiCertGlobalRootG2.crt.pem&quot;)),
 rejectUnauthorized: true,
 require: true,
 },
 },
 },
);
</code></pre>
DigiCertGlobalRootG2.crt.pem: Is a combination of 2 key for constitency(BaltimoreCyberTrustRoot.crt.pem gonna expiry soon).One file with multiple keys as
----- BEGIN CERTIFICATE -----
BaltimoreCyberTrustRoot.crt.pem
----- END CERTIFICATE -----
----- BEGIN CERTIFICATE -----
DigiCertGlobalRootG2.crt.pem
-----END CERTIFICATE-----
Connecting to Azure postgress from node.js application using Sequelize ORM with support of SSL. 
DigiCertGlobalRootG2.crt.pem: You will get it from the <a href="https://docs.microsoft.com/en-us/azure/mysql/concepts-certificate-rotation" rel="nofollow noreferrer">Azure portal</a>.
Note: If not using any key then ssl configuration is like this:
<pre><code>const sequelize = new Sequelize(
 configuration.get(&quot;postgresConnectionString&quot;),
 {
 logging: false,
 dialectOptions: {
 ssl: true,
 },
 },
);
</code></pre>
Note: Please check the <code>connectionString</code> ends with <code>sslmode=require|| ssl_ca=required: https://docs.microsoft.com/en-us/azure/mysql/concepts-certificate-rotation</code>, based this, please add SSL configuration accordingly
Note: The content you feel need a change , please let me know

blocks|key|4650370|text|如果您正在使用AWS+RDS+Proxy+for+Postgresql，那么ssl:+true就足够了。完整的例子在这里|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|4650371|let+getConnection+=+async+()+=>+{
++++let+connParam+=+{
++++++++host:+{RDS_PROXY_URL},
++++++++port:+{PORT},
++++++++user:+{USERNAME},
++++++++database+:+{DB_ANME},
++++++++password:+{PASSWORD},
++++++++ssl:+true
++++};
++++
++++let+pgClient+=+new+pg.Client(connParam);

++++await+pgClient.connect();

++++return+pgClient;
}|code-block|syntax|javascript|4650372|entityMap^0|12|9|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@$9|N|A|O|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|P|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|Q|8|@]|D|@]|E|$]]]|L|$]]

If you are using AWS RDS Proxy for Postgresql then <code>ssl: true</code> is sufficient. complete example is here
<pre><code>let getConnection = async () =&gt; {
 let connParam = {
 host: {RDS_PROXY_URL},
 port: {PORT},
 user: {USERNAME},
 database : {DB_ANME},
 password: {PASSWORD},
 ssl: true
 };
 
 let pgClient = new pg.Client(connParam);

 await pgClient.connect();

 return pgClient;
}
</code></pre>

I am trying to connect to my Heroku PostgreSQL DB and I keep getting an SSL error. Does anyone have an idea on how to enable SSL in the connection string?

<pre><code>postgres://user:pass@host:port/database;
</code></pre>

Been looking for it everywhere but it does not seem to be a very popular topic.
By the way, I am running Nodejs and the node-pg module with its connection-pooled method:

<pre><code>pg.connect(connString, function(err, client, done) {
 // Should work.
});
</code></pre>

Comments are much appreciated.

SSL for PostgreSQL connection nodejs

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋 

腾讯云代码助手

CODING DevOps

Cloud Studio

SDK中心

API中心

命令行工具

我正在尝试连接到我的Heroku，但我一直收到PostgreSQL错误。有人知道如何在连接字符串中启用SSL吗？postgres://user:pass@host:port/database;我一直在到处寻找它，但它似乎不是一个很受欢迎的话题。顺便说一下，我正在运行Nodejs和node-pg模块及其连接池方法：pg....

问用于PostgreSQL连接节点的SSL
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问用于PostgreSQL连接节点的SSLEN