aws / aws/amazon-documentdb-odbc-driver
Enable use of Amazon RDS CA certificate in driver
- Dominant language
- C++
- Stars
- 6
- Forks
- 2
- PR merge metrics
- No merged PRs in 30d
Description
Currently, the standard Amazon RDS CA root certificate is not being bunded with the ODBC driver.
[Download an SSL certificate for your managed database in Amazon Lightsail | Lightsail Documentation](https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-download-ssl-certificate-for-managed-database)
https://s3.amazonaws.com/rds-downloads/rds-ca-2019-root.pem
An attempt was made to enable this in the driver, without success.
`tls_options.ca_file("path-to-file")`
However, this did not seem to work as expected.
So currently, we are allowing invalid server certificates
`tls_options.allow_invalid_certificates(true)`
This task is to resolve the issue of using a CA file, distribute the CA certificate and re-enable server certificate checking.
Contributor guide
Research direction
The issue names tls_options.ca_file and tls_options.allow_invalid_certificates; start by tracing those entry points through the driver and its TLS setup. Done means CA-file loading works, the RDS CA certificate is distributed, and server-certificate checking is enabled against a managed database connection.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, cpp
- Domain
- databases, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100