Database Engine Version Upgrade #1486

ssl options
GSA · Feb 4, 2025 · aca82b0 · aca82b0
1 parent 47872fc
commit aca82b0
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/config/prod.exs b/config/prod.exs
@@ -16,12 +16,16 @@ config :challenge_gov, Web.Endpoint,
   cache_static_manifest: "priv/static/cache_manifest.json",
   secret_key_base: System.get_env("SECRET_KEY_BASE")
 
+check_hostname = 'cg-aws-broker-prodo0g0lv1irkwn9f3.ci7nkegdizyy.us-gov-west-1.rds.amazonaws.com'
+
 config :challenge_gov, ChallengeGov.Repo,
   url: System.get_env("DATABASE_URL"),
   ssl: true,
   ssl_opts: [
     cacertfile: "priv/certs/us-gov-west-1-bundle.pem",
-    verify: :verify_peer
+    server_name_indication: check_hostname,
+    verify: :verify_peer,
+    verify_fun: {&:ssl_verify_hostname.verify_fun/3, [check_hostname: check_hostname]}
   ],
   pool_size: String.to_integer(System.get_env("POOL_SIZE") || "15"),
   loggers: [{LoggerJSON.Ecto, :log, [:info]}]