If I set `ssl: true` for a tap, where do I put the...
# getting-started
d
If I set
ssl: true
for a tap, where do I put the client certificate?
f
I’m not sure off-hand where it might look but I can take a peek at the tap. Which tap/variant are you working with?
d
pipelinewise-tap-postgres
f
Looks like
ssl: true
only sets
sslmode= require
and I don't see options to set a path to an ssl key & root. /cc <!subteam^S02BCD9FFEF> have any of y'all used ssl client auth ? Wondering if you can just drop the cert in the default location and still have it picked up.
I think in libpq it looks in
~/.postgresql/ssl.crt
or something along those lines.
https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING looks like the default paths (at least for libpq) is
~/.postgresql/postgresql.[crt|key]
and
~/.postgresql/root.crt
d
fyi for GCP certs the rename is
Copy code
server-ca.pem -> root.crt
client-key.pem -> postgresql.key
client-cert.pem -> postgresql.crt
and they go in the meltano users’
.postgresql
folder
f
ah cool, yea i just saw your thread in #C013EKWA2Q1 rockon