How to set SSL options correctly when connecting to Heroku postgres db?

Phoenix Forum Questions / Help
2

Do you also upgraded to OTP 26? Because OTP 26 has some safer ssl defaults:

In OTP 26, the default value for the verify option is now verify_peer instead of verify_none. Host verification requires trusted CA certificates to be supplied using one of the options cacerts or cacertsfile.

You could get the old behaviour with the following configuration:

config :abc, abc.Repo,
  [...]
  ssl_opts: [verify: :verify_none]
5 Likes