From f43f743c55d9059805690b34d9c66076d1198b6d Mon Sep 17 00:00:00 2001
From: Div Arora <root@darora.com>
Date: Mon, 5 Feb 2024 06:55:39 +0800
Subject: [PATCH] fix: enforce hostname checks only for verify-full

---
 src/lib/db.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/lib/db.ts b/src/lib/db.ts
index 4324b0be..b17a013e 100644
--- a/src/lib/db.ts
+++ b/src/lib/db.ts
@@ -48,7 +48,7 @@ export const init: (config: PoolConfig) => {
       if (typeof config.ssl !== 'object') {
         config.ssl = {}
       }
-      config.ssl.rejectUnauthorized = sslmode !== 'no-verify'
+      config.ssl.rejectUnauthorized = sslmode === 'verify-full'
     }
   }