You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: use-timescale/security/strict-ssl.md
+5-4Lines changed: 5 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,19 +3,20 @@ title: Connect with a stricter SSL mode
3
3
excerpt: While require is the default SSL mode used to connect to Tiger Cloud services, you can also configure the connection with a stricter mode, such as verify-ca or verify-full. Learn how to set it up
The default connection string for $CLOUD_LONG uses the Secure Sockets Layer (SSL) mode `require`.
13
-
Users can choose not to use Transport Layer Security (TLS) while connecting to their databases, but connecting to production databases without encryption is strongly discouraged. To
13
+
Users can choose not to use Transport Layer Security (TLS) while connecting to their databases, but connecting to
14
+
production databases without encryption is strongly discouraged. To
14
15
achieve even stronger security, clients may select to verify the identity of the
15
16
server. If you want your connection client to verify the server's identity, you
16
17
can connect with an [SSL mode][ssl-modes] of `verify-ca` or `verify-full`. To
17
18
do so, you need to store a copy of the certificate chain where your connection
18
-
tool can find it.
19
+
tool can find it.
19
20
20
21
This section provides instructions for setting up a stricter SSL connection.
21
22
@@ -31,7 +32,7 @@ lets you start up a $SERVICE_SHORT immediately. After your $SERVICE_SHORT is sta
31
32
signed certificate is requested behind the scenes. The new certificate is
32
33
usually received within 30 minutes. Your certificate is then replaced
33
34
with almost no interruption. Connections are reset, and most clients reconnect
34
-
automatically.
35
+
automatically. Free services do not supply SSL certificates.
35
36
36
37
With the signed certificate, you can switch your connections to a stricter SSL
0 commit comments