Use cacerts on verify peer (#739)

josevalim · web-flow · commit 08ccccfe84b7 · 2025-04-22T18:10:22.000+02:00
diff --git a/lib/postgrex/protocol.ex b/lib/postgrex/protocol.ex
@@ -166,7 +166,8 @@ defmodule Postgrex.Protocol do
       verify: :verify_peer,
       customize_hostname_check: [
         match_fun: :public_key.pkix_verify_hostname_match_fun(:https)
-      ]
+      ],
+      cacerts: :public_key.cacerts_get()
     ]
   end
 

Original file line number	Diff line number	Diff line change
`@@ -166,7 +166,8 @@ defmodule Postgrex.Protocol do`
`166`	`166`	`verify: :verify_peer,`
`167`	`167`	`customize_hostname_check: [`
`168`	`168`	`match_fun: :public_key.pkix_verify_hostname_match_fun(:https)`
`169`		`- ]`
	`169`	`+ ],`
	`170`	`+ cacerts: :public_key.cacerts_get()`
`170`	`171`	`]`
`171`	`172`	`end`
`172`	`173`