Asyncpg: Connecting to postgres over ssl

[anirudh-chhangani]

Is there any support to connect to postgres over ssl? I am pretty new to asyncio, would appreciate if there is any other way to do this since heroku postgres db's can only be connected over ssl. Thanks

[1st1]

We need to add starttls to asyncio & uvloop to do this (I have a patch for that). Another option is to abuse loop.create_connection, I'll have to experiment with that...

[gglanzani]

Any news on this, or can we help somehow?

[tomas-fp]

Any new about this? Is there any recommended workaround?

[1st1]

I'll look at this next week (feel free to ping me here again). I'll try to copy aiohttp approach to upgrading an asyncio connection to TLS, which seems to be compatible with both Python 3.5 & 3.6.

[tomas-fp]

That would be awesome. This is a blocking issue for us.
Also, I'm very open to collaborate with you in the way you consider.

[hanula]

@tomas-fp for a workaround I used Foreign Data Wrappers to connect using local instance to an external database. Works good enough for my non production stuff.
As for TLS, it seems like only Python 3.6 comes with changes to asyncio that allows implementing it. Full TLS support is supposed to be coming later (can't find source for it now).

[edit] As discussed here: https://bugs.python.org/issue23749

[songololo]

Looks like the python functionality will land in 3.7:

_'It's expected that we'll figure out the API design for starttls during 3.6, so that we can add it in 3.7.'_

[anirudh-chhangani]

awesome! thanks a lot!

[1st1]

It will be shipped as part of asyncpg 0.10.0 later today ;)

[tomas-fp]

Thanks!