About Azure Database for PostgreSQL – Flexible Server

[TakeshiMifune]

Is your feature request related to a problem? Please describe.

Hello Team,

This is Takeshi Mifune.
We are currently using SAS Viya on Azure and have received the following communication.

In July 2024, we’ll begin updating Azure Database for PostgreSQL Flexible Server to use TLS certificates from Microsoft RSA Root Certificate Authority 2017. If your apps use certificate pinning, you’ll need to update your trusted root store to accept this root CA in addition to existing DigiCert Global Root CA.
•If your applications take advantage of verify-ca or verify-full as value of sslmode parameter in the database client connectivity they may be affected by this change and need to follow below directions to add new certificates to certificate store to maintain connectivity.
•If your connection string includes sslmode=disable, sslmode=allow, sslmode=prefer, or sslmode=require, you don’t need to update certificates.

'[question]
SAS Viya version：LTS 2024.03
External PstgresSQL is created using "viya4-iac-azure".
(It is created with the following contents in "terraform.tfvars".)
postgres_servers = {
default = {
sku_name = "GP_Standard_D4ds_v4"
storage_mb = 131072
connectivity_method = "private"
administrator_password = ""
postgresql_configurations = [
{
name = "max_connections"
value = "1024"
}
]
},
}
'==========

1. Are we using verify-ca or verify-full for the value of the sslmode parameter?

2. Please let me know if there is a way to verify the value of the sslmode parameter.
   ==========

Best Regards,
Takeshi

Describe the solution you'd like

I want to check if the Azure Database for PostgreSQL – Flexible Server needs to renew the certificate.

Describe alternatives you've considered

No response

Additional context

No response

Code of Conduct

• I agree to follow this project's Code of Conduct