safe-global / safe-client-gateway / 8158910301 / 1

89%

main: 89%

push

github

Add support for Database certificate pinning (#1235)

- Adds support for pinning a CA certificate.
- If SSL is enabled:
  * `POSTGRES_SSL_REQUEST_CERT` can be used to make Postgres request a certificate from the clients. (default `true`)
  * `POSTGRES_SSL_CA_PATH` can be used to specify the absolute path to the certificate file (no default).
  * More details can be found in https://nodejs.org/api/tls.html#tlscreateserveroptions-secureconnectionlistener
- The self-signed certificated is a X509 certificate with validity of 365 days. The Common Name (CN) is `localhost`.

Docker:
- The local development instance `db`, does not have SSL configured (i.e.: no changes).
- The local test instance `db-test`, has SSL configured and will use the self-signed certificate available under `<projectRoot>/db_config/test`.
  * With the described setup, we are testing if the connection options are valid.

258 of 2057 branches covered (12.54%)

Branch coverage included in aggregate %.

7066 of 12088 relevant lines covered (58.45%)

4.42 hits per line