Django connection to Postgresql using cert authentication

Question

In Django 1.9, what changes do I have to make in settings.py in order to connect to a postgresql database using cert authentication?

damon · Accepted Answer · 2020-03-10 16:07:16Z

5

Adding this to settings.py worked for me:

import os

DATABASES = {
    'default': {
        'ENGINE': 'django.db.backends.postgresql_psycopg2',
        'NAME': '<name>',
        'USER': '<user>',
        'PASSWORD': '<password>',
        'HOST': '<host>',
        'PORT': '25060',   
        'OPTIONS': {
            'sslmode': 'verify-full',
            'sslrootcert': os.path.join(BASE_DIR, 'ca-certificate.crt'),
        },
    },
}

edited Mar 10, 2020 at 16:07

damon

15.2k16 gold badges61 silver badges79 bronze badges

answered Dec 6, 2019 at 1:45

dangelsaurus

7,6128 gold badges58 silver badges77 bronze badges

Sign up to request clarification or add additional context in comments.

5 Comments

Malik Faiq Over a year ago

is it okay to place the certificate file in repo?

wsgeorge Over a year ago

@MalikFaiq it's not.

pooley1994 Over a year ago

@MalikFaiq The certificate file is public by definition, so there would be no security vulnerability posed by storing it in the repo and in some cases it may make sense to do so, however that is likely not best from a configuration management perspective.

AllAboutMike Over a year ago

This answer describes using certificates to make an SSL secured connection to postgresql using password authentication. I believe the OP was asking about "Certificate Authentication" (see jjanes answer)

dangelsaurus Over a year ago

@AllAboutMike, you are correct, not sure how I missed something so obvious now that I re-read it.

jjanes · Accepted Answer · 2016-03-08 19:54:33Z

4

To my knowledge, django uses psycopg2, which in turn uses libpq. This means you shouldn't need to make any changes to settings.py.

You have to configure the server properly so it asks for and knows how to validate the certificate, and on the client side you need to put the crt and the key in the correct directory (e.g. ~/.postgresql) so that libpq knows how to find them. Once that is done properly, it should just work with no changes to any Django-specific code.

answered Mar 8, 2016 at 19:54

jjanes

44.9k5 gold badges39 silver badges48 bronze badges

Collectives™ on Stack Overflow

Django connection to Postgresql using cert authentication

2 Answers 2

5 Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

5 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related