Force SSL for Django Postgres connection

Question

I want to force Django to use SSL to connect to my postgres database.

This question indicates that I need to pass sslmode='require' to the psycopg2 connect call. How do I add this to Django's database paremeters?

Zags · Accepted Answer · 2022-07-26 14:04:21Z

66

Add 'OPTIONS': {'sslmode': 'require'}, to your database config. For example:

DATABASES = {
    'default': {
        'ENGINE': 'django.db.backends.postgresql',
        'NAME': "db_name",
        'USER': "db_username",
        'PASSWORD': "db_password",
        'HOST': "db_host",
        'OPTIONS': {'sslmode': 'require'},
    },
}

As jklingen92 points out, if you are using a database URL, such as through django-environ, add ?sslmode=require to the end of your database URL. For example:

postgres://<DB_USERNAME>:<DB_PASSWORD>@<DB_HOST>:<PORT>/<DB_NAME>?sslmode=require

edited Jul 26, 2022 at 14:04

answered Dec 6, 2017 at 20:37

Zags

41.9k16 gold badges125 silver badges157 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Florent Over a year ago

Are you not supposed to pass a certificat ?

Zags Over a year ago

@Florent The database client doesn't need to specify a certificate unless you're using the optional clientcert authentication options. How to do that in Django is a separate question

jklingen92 · Accepted Answer · 2020-07-17 21:42:21Z

10

If you're configuring a database URL, you can pass options as query parameters:

DATABASE_URL=postgres://USER:PASSWORD@HOST:PORT/NAME?sslmode=require

This works with both Django Configurations and with Django Environ. Django Configurations is built off of dj_database_url, so you can also pass ssl_require=True as @frmdstryr said:

DATABASES = values.DatabaseURLValue(environ_required=True, ssl_require=True)

answered Jul 17, 2020 at 21:42

jklingen92

1011 silver badge4 bronze badges

2 Comments

Sandeep Balagopal Over a year ago

where to specify the certificate ?

Oscar Chen Over a year ago

@SandeepBalagopal You can specify paths to SSL certificate by adding the following to OPTIONS (along the aforementioned sslmode attribute): { 'sslmode': 'require', 'sslcert': '/path/to/file', 'sslkey': '/path/to/file', 'sslrootcert': '/path/to/file'}

frmdstryr · Accepted Answer · 2019-07-09 16:55:28Z

5

If you're using dj_database_url you can pass ssl_require=True which sets the option for you.

import dj_database_url
DATABASES['default'] = dj_database_url.config(ssl_require=True)

answered Jul 9, 2019 at 16:55

frmdstryr

21.6k3 gold badges43 silver badges34 bronze badges

Comments

Sumit Kumar · Accepted Answer · 2023-06-29 13:47:28Z

1

Edit the settings.py file like this:

DATABASES = {
    # 'default': {
    #     'ENGINE': 'django.db.backends.sqlite3',
    #     'NAME': os.path.join(BASE_DIR, 'db.sqlite3'),
    # },
    'default': {
        'ENGINE': 'django.db.backends.postgresql_psycopg2',
        'HOST': 'server-ip',
        'PORT': '5432',
        'NAME': 'database-name',
        'USER': 'username',
        'PASSWORD': 'password',
        'OPTIONS': {
            'sslmode': 'require',
            'sslcert': '/path/to/file',
            'sslkey': '/path/to/file',
            'sslrootcert': '/path/to/file',
        },
    },
}

references visit here

answered Jun 29, 2023 at 13:47

Sumit Kumar

7706 silver badges22 bronze badges

Collectives™ on Stack Overflow

Force SSL for Django Postgres connection

4 Answers 4

2 Comments

2 Comments

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

4 Answers 4

2 Comments

2 Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related