safe-global / safe-client-gateway / 8158910301 / 2

89%

main: 89%

push

github

Add support for Database certificate pinning (#1235)

- Adds support for pinning a CA certificate.
- If SSL is enabled:
  * `POSTGRES_SSL_REQUEST_CERT` can be used to make Postgres request a certificate from the clients. (default `true`)
  * `POSTGRES_SSL_CA_PATH` can be used to specify the absolute path to the certificate file (no default).
  * More details can be found in https://nodejs.org/api/tls.html#tlscreateserveroptions-secureconnectionlistener
- The self-signed certificated is a X509 certificate with validity of 365 days. The Common Name (CN) is `localhost`.

Docker:
- The local development instance `db`, does not have SSL configured (i.e.: no changes).
- The local test instance `db-test`, has SSL configured and will use the self-signed certificate available under `<projectRoot>/db_config/test`.
  * With the described setup, we are testing if the connection options are valid.

1758 of 2148 branches covered (81.84%)

Branch coverage included in aggregate %.

12600 of 13194 relevant lines covered (95.5%)

169.46 hits per line