Active record - TCP over SSL native support

anaveragerubyuser · April 25, 2025, 8:02pm

Hello! A client is migrating to encrypt database communication using SSL over TCP, and signed certificates. I’ve been unable to find any docs regarding possible configuration parameters in Active Record to configure Active Record connection, such as turning on or off domain validation or path to certificates. Is TCPS supported? Has someone configured natively Active Record to connect via TCPS? Could you provide me with a guide or some steps to follow to configure accordingly?
Thanks in advance.

ashleyconnor · April 26, 2025, 6:52pm

What database are you using?

There are some SSL certificate options that can be set in your database.yml depending on the driver in use.

github.com/rails/rails

activerecord/lib/active_record/connection_adapters/postgresql_adapter.rb

99e27fa58


      
          ENV["PGSSLMODE"]      = pg_config[:sslmode].to_s if pg_config[:sslmode]
          ENV["PGSSLCERT"]      = pg_config[:sslcert].to_s if pg_config[:sslcert]
          ENV["PGSSLKEY"]       = pg_config[:sslkey].to_s if pg_config[:sslkey]
          ENV["PGSSLROOTCERT"]  = pg_config[:sslrootcert].to_s if pg_config[:sslrootcert]

Options for sslmode are documented here: PostgreSQL: Documentation: 17: 32.19. SSL Support

anaveragerubyuser · April 28, 2025, 4:51pm

Hi! Thanks in advance for replying. We’re using Oracle Enterprise Edition database, using the Oracle Enhanced library as an intermediary.

ashleyconnor · April 29, 2025, 3:19am

Apologies that’s definitely out of my area of expertise. I took a look at the repo oracle-enhanced the only details I could find on encryption where in this PR

github.com/rsim/oracle-enhanced

Additional connect properties for JDBC connection in adapter config

master ← rammpeter:master

opened 03:58PM - 11 Apr 22 UTC

rammpeter

+27 -0

Additional connect properties for JDBC connection in adapter config (database.ym…l). This allows to configure several additional JDBC connect properties, especially network encryption and network checksumming (like requested in #2058) by: ``` adapter: oracle_enhanced jdbc_connect_properties: 'oracle.net.encryption_client': REQUIRED 'oracle.net.crypto_checksum_client': REQUIRED ```

Topic		Replies	Views
jdbc:postgresql://localhost/test?ssl=true rubyonrails-talk	1	135	March 8, 2007
ActiveRecord ssl Postgres connections rubyonrails-talk	0	77	February 11, 2009
MySQL and SSL rubyonrails-core	0	78	January 5, 2007
How do i enable SSL? rubyonrails-talk	7	177	October 27, 2008
Best way to securely connect to remote Postgres server from Rails. rubyonrails-talk	2	174	February 21, 2014

Active record - TCP over SSL native support

Related topics

More Resources