aws / aws/amazon-documentdb-odbc-driver

Enable use of Amazon RDS CA certificate in driver

Open
#177 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C++
Stars
6
Forks
2
PR merge metrics
No merged PRs in 30d

Description

Currently, the standard Amazon RDS CA root certificate is not being bunded with the ODBC driver.

[Download an SSL certificate for your managed database in Amazon Lightsail | Lightsail Documentation](https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-download-ssl-certificate-for-managed-database)

https://s3.amazonaws.com/rds-downloads/rds-ca-2019-root.pem

An attempt was made to enable this in the driver, without success.

`tls_options.ca_file("path-to-file")`

However, this did not seem to work as expected.

So currently, we are allowing invalid server certificates

`tls_options.allow_invalid_certificates(true)`

This task is to resolve the issue of using a CA file, distribute the CA certificate and re-enable server certificate checking.

Contributor guide

Open the contributing guide

Research direction

The issue names tls_options.ca_file and tls_options.allow_invalid_certificates; start by tracing those entry points through the driver and its TLS setup. Done means CA-file loading works, the RDS CA certificate is distributed, and server-certificate checking is enabled against a managed database connection.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, cpp
Domain
databases, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.