通过npgsql使用CA证书连接到.NET Core上的DO Postgres群集

Question

I'm actually using DigitalOcean's Postgres cluster . Managed to connect via DataGrip to the server with the credentials I have but I'm facing an auth issue on .NET Core. Apparently, you need to auth with the credentials given + the ca-certificate provided (DigitalOcean provides the CA).

services.AddDbContext<NozomiDbContext>(options =>
                {
                    options.UseNpgsql(mainDb
                        , builder =>
                        {
                            builder.EnableRetryOnFailure();
                            builder.ProvideClientCertificatesCallback(certificates =>
                            {
                                var cert = new X509Certificate2("ca-certificate.crt");
                                certificates.Add(cert);
                            });
                        }
                    );
                    options.EnableSensitiveDataLogging(false);
                    options.UseQueryTrackingBehavior(QueryTrackingBehavior.NoTracking);
                }, ServiceLifetime.Transient);

After that, running the project results in:

System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.

What am I doing wrong? Really apologise if this isn't enough.

Am on PG 11.4 by the way.

Answer 1

Your server certificate is likely self-signed or cannot be validated for some reason. You can tell Npgsql to disable checking the server certificate by adding Trust Server Certificate=true on the connection string.

See more in the docs .