feat: enable SNI (#953)

uptrace · Apr 2, 2024 · 4071ffb · 4071ffb
1 parent 8a0397b
commit 4071ffb
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/driver/pgdriver/config.go b/driver/pgdriver/config.go
@@ -269,6 +269,10 @@ func parseDSN(dsn string) ([]Option, error) {
 		case "require":
 			if sslRootCert == "" {
 				tlsConfig.InsecureSkipVerify = true
+				tlsConfig.ServerName = u.Host
+				if host, _, err := net.SplitHostPort(u.Host); err == nil {
+					tlsConfig.ServerName = host
+				}
 				break
 			}
 			// For backwards compatibility reasons, in the presence of `sslrootcert`,
@@ -283,6 +287,10 @@ func parseDSN(dsn string) ([]Option, error) {
 			// (verify chain, but skip server name).
 			// See https://github.com/golang/go/issues/21971 .
 			tlsConfig.InsecureSkipVerify = true
+			tlsConfig.ServerName = u.Host
+			if host, _, err := net.SplitHostPort(u.Host); err == nil {
+				tlsConfig.ServerName = host
+			}
 			tlsConfig.VerifyPeerCertificate = func(rawCerts [][]byte, verifiedChains [][]*x509.Certificate) error {
 				certs := make([]*x509.Certificate, 0, len(rawCerts))
 				for _, rawCert := range rawCerts {