1435010 - Use SSL to connect to Postgres database

Status: RESOLVED FIXED

(Webtools Graveyard :: Pontoon, defect, P1)

Description

[Matjaz Horvat [:mathjazz]]

See bug 1434990 for details.

tl;dr
"If your app does not enforce SSL for database connections prior to our March 2018 maintenances, it will break."

Comment 1

[GitHub Bugzilla PR Linker]

Attachment: Link to GitHub pull-request: https://github.com/mozilla/pontoon/pull/838

Comment 2

[Ed Morley [:emorley]]

The first brownout has started:
https://papertrailapp.com/systems/mozilla-pontoon/events?focus=900479095102672903

Comment 3

[Matjaz Horvat [:mathjazz]]

It's over now:
https://papertrailapp.com/systems/mozilla-pontoon/events?focus=900481748956241924

Looks like we're good. I don't see any errors in the log. The app acted normally during the brownout.

I guess this bug is a wontfix?

Comment 4

[Ed Morley [:emorley]]

Either a WORKSFORME or else a bug to reference re using the best practice of `sslmode=require` to prevent MITM downgrade attacks :-)
https://github.com/mozilla/pontoon/pull/838#issuecomment-365681098

Comment 5

[[github robot]]

Commit pushed to master at https://github.com/mozilla/pontoon

https://github.com/mozilla/pontoon/commit/d6bd2d1927afe4ff86c63d1d5fb3450030bf65fa
Fix bug 1435010 - Require SSL for connecting to PostgreSQL. (#838)