Hello 👋

Hello 👋
Does Hyperdrive supports connecting to PostgreSQL with TLS 1.3 (Ed25519)? I got this error while configuring Hyperdrive via Zero Trust Tunnel:
Failed to connect to the provided database: TLS handshake failed [SSLV3_ALERT_HANDSHAKE_FAILURE] [HANDSHAKE_FAILURE_ON_CLIENT_HELLO]
Failed to connect to the provided database: TLS handshake failed [SSLV3_ALERT_HANDSHAKE_FAILURE] [HANDSHAKE_FAILURE_ON_CLIENT_HELLO]
3 Replies
Aditya Kresna
Aditya KresnaOP4w ago
It's confirmed working with RSA-2048, sad. Our stacks uses EdDSA/Ed25519 chains 🙁
AJR
AJR4w ago
Unfortunately we only support the default curves right now.
@Aditya Kresna would you mind sharing some details about your stack and use case? In DM is fine if you prefer. @thomasgauvin between this and Coolify we might consider doing a pass on our PG crypto support soon, seems like there are more non-defaults running around.
Aditya Kresna
Aditya KresnaOP4w ago
I have RF3 Database with YugabyteDB for OLTP system, and the performance is very good with Ed25519. Currently some services are in Cloudflare Worker, so I need Hyperdrive. And some services deployed On-Premise built with Rust. I was excited when Cloudflared added Serverless Container but sadly it doesn't have the same privilege like other Workers, like it can't access D1. To cut the story short, we put everything (OLTP & OLAP) into On-Premise RF3 YugabyteDB then we're going to access it with many Hyperdrive (because Hyperdrive can't do load balancing/failover or am I wrong on this?) Also our ca.crt & ca.key are made with Ed25519/EdDSA including JWT etc

Did you find this page helpful?