From e10083651b4bf58d4a78c49f285efac9c5bad4e2 Mon Sep 17 00:00:00 2001
From: mdecimus <mauro@stalw.art>
Date: Wed, 8 May 2024 18:43:44 +0200
Subject: [PATCH] mySQL TLS support (closes #415)

---
 crates/store/src/backend/mysql/main.rs | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/crates/store/src/backend/mysql/main.rs b/crates/store/src/backend/mysql/main.rs
index fc712b88..7bf5843b 100644
--- a/crates/store/src/backend/mysql/main.rs
+++ b/crates/store/src/backend/mysql/main.rs
@@ -55,11 +55,16 @@ impl MysqlStore {
         }
 
         if config
-            .property_or_default::<bool>((&prefix, "tls.allow-invalid-certs"), "false")
+            .property_or_default::<bool>((&prefix, "tls.enable"), "false")
             .unwrap_or_default()
         {
+            let allow_invalid = config
+                .property_or_default::<bool>((&prefix, "tls.allow-invalid-certs"), "false")
+                .unwrap_or_default();
             opts = opts.ssl_opts(Some(
-                SslOpts::default().with_danger_accept_invalid_certs(true),
+                SslOpts::default()
+                    .with_danger_accept_invalid_certs(allow_invalid)
+                    .with_danger_skip_domain_validation(allow_invalid),
             ));
         }