default to system certificate store

elixir-ecto · Jun 26, 2024 · f06c79b · f06c79b
1 parent cb9c213
commit f06c79b
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/lib/postgrex/protocol.ex b/lib/postgrex/protocol.ex
@@ -143,12 +143,18 @@ defmodule Postgrex.Protocol do
   end
 
   defp default_ssl_opts do
-    [
+    opts = [
       verify: :verify_peer,
       customize_hostname_check: [
         match_fun: :public_key.pkix_verify_hostname_match_fun(:https)
       ]
     ]
+
+    try do
+      Keyword.put(opts, :cacerts, :public_key.cacerts_get())
+    rescue
+      _ -> opts
+    end
   end
 
   defp endpoints(opts) do