require verify-ca to specify sslrootcert when sslmode is libpq compat

Author: hjr3

packages/pg-connection-string/index.js

@@ -108,6 +108,9 @@ function parse(str) {
         break
       }
       case 'verify-ca': {
+        if (!config.ssl.ca) {
+          throw new Error('sslmode=verify-ca requires specifying a CA with sslrootcert')
+        }
         config.ssl.checkServerIdentity = function () {}
         break
       }

packages/pg-connection-string/test/parse.js

@@ -297,6 +297,13 @@ describe('parse', function () {
 
   it('configuration parameter sslmode=verify-ca with libpq compatibility', function () {
     var connectionString = 'pg:///?sslmode=verify-ca&sslcompat=libpq'
+    expect(function () {
+      parse(connectionString)
+    }).to.throw()
+  })
+
+  it('configuration parameter sslmode=verify-ca and sslrootcert owith libpq compatibility', function () {
+    var connectionString = 'pg:///?sslmode=verify-ca&sslcompat=libpq&sslrootcert=' + __dirname + '/example.ca'
     var subject = parse(connectionString)
     subject.ssl.should.have.property('checkServerIdentity').that.is.a('function')
     expect(subject.ssl.checkServerIdentity()).be.undefined