How to connect via SSL to sequelize DB

Question

I can't seem to find any documentation for SEQUELIZE.JS on how to use a CA.crt in order to enable connection to my database sitting on a remote server.

I figure its something in the options but I can't seem to figure it out

I have tried

{
 'ssl': true
 'dialectOptions':{
   ssl: {
     ca: 'path/to/ca'
   }
 }     
}

and a few other things but nothing seem to work for me.

Can anybody help me?

Edit:

Here is an error i get when using the ca thing

error connecting to db { Error: unable to verify the first certificate
at TLSSocket.<anonymous>

In addition to my below, just a quick remark. You need to pass all 3 components, 2 certs and key file in some form. — Mark
– Mark, Commented Jun 5, 2017 at 10:56

Mark · Accepted Answer · 2017-06-05 10:54:49Z

21

As you don't mention the backend DB of choice, I'll give a mysql sample and how I'd suggest you go about it.

First, confirm the connection using the dialect directly, so for mysql2 supplying variables as necessary:

const connection = mysql.createConnection({
  host: dbVars.host,
  user: dbVars.user,
  database: dbVars.database,
  password: dbVars.password,
  ssl: {
    key: cKey,
    cert: cCert,
    ca: cCA
  }
});

Once that connection is confirmed, move it to Sequelize as:

const sequelize = new Sequelize(dbVars.database, dbVars.user, dbVars.password, {
  host: dbVars.host,
  dialect: 'mysql',
  dialectOptions: {
    ssl: {
      key: cKey,
      cert: cCert,
      ca: cCA
    }
  }
});

Note: loading the certs properly was a learning curve and required a direct import using a raw-loader. Example:

import cKey from 'raw-loader!../certs/client-key.pem';

answered Jun 5, 2017 at 10:54

Mark

63010 silver badges23 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Max Over a year ago

fs.fileReadSync works just as well for me to read the .pem files.

Herman J. Radtke III Over a year ago

Per docs it is fs.readFileSync.

Usama Tahir Over a year ago

How do I get cCert and cCA?

therightstuff · Accepted Answer · 2023-07-05 09:52:25Z

1

Thanks to Mark's answer above, I was able to connect to a Postgres RDS instance from a Node.js Lambda function as follows:

        const sequelize = new Sequelize(POSTGRES_DATABASE, POSTGRES_USERNAME, POSTGRES_PASSWORD, {
            host: POSTGRES_HOST,
            port: POSTGRES_PORT,
            dialect: 'postgres',
            dialectOptions: {
              ssl: {
                // CAUTION: there are better ways to load the certificate, see comments below
                ca: fs.readFileSync(join(__dirname, 'rds-combined-ca-bundle.pem')).toString()
              }
            }
          });

(Obviously this required the PEM file to be available, see Using SSL/TLS to encrypt a connection to a DB instance)

edited Jul 5, 2023 at 9:52

answered Jun 11, 2023 at 7:10

therightstuff

1,0672 gold badges18 silver badges24 bronze badges

4 Comments

NingaCodingTRV Over a year ago

Read a file, to finally set it as string? 🤔 just copy the pem content into an ENV VAR and use it.

therightstuff Over a year ago

You may be right, but that's not really a central feature of the example :)

NingaCodingTRV Over a year ago

bad practices propagation, is the copy/paste example. Hope anyone read the good alternative. Regards.

therightstuff Over a year ago

@NingaCodingTRV fair point, i've updated the example to point here. another alternative is loading the file outside of the handler so that it's available for the invocation context.

Collectives™ on Stack Overflow

How to connect via SSL to sequelize DB

2 Answers 2

3 Comments

4 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

3 Comments

4 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related