ssl cert

config/prod.exs

@@ -18,7 +18,7 @@ config :challenge_gov, Web.Endpoint,
 
 config :challenge_gov, ChallengeGov.Repo,
   url: System.get_env("DATABASE_URL"),
-  ssl: if(System.get_env("DATABASE_SSL") == "true", do: [verify: :verify_none], else: false),
+  ssl: if(System.get_env("DATABASE_SSL") == "true", do: [verify: :verify_ca, cacertfile: "config/us-gov-west-1-bundle.pem"], else: false),
   pool_timeout: :infinity,
   timeout: :infinity,
   pool_size: String.to_integer(System.get_env("POOL_SIZE") || "15"),

config/us-gov-west-1-bundle.pem

@@ -0,0 +1,136 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----