[BUG] PostgreSQL: rustls invalid peer certificate: Other(UnsupportedCertVersion)

[wyhaya]

Bug Description

I get this error when trying to connect to railway's Postgres database using sqlx

Minimal Reproduction

// Features: "postgres", "runtime-tokio-rustls"
// Error: error communicating with database: invalid peer certificate: Other(UnsupportedCertVersion)
let pool = PgPool::connect("postgresql://...").await?;

There is no problem using native-tls, it only occurs when using rustls.

• Railway's postgres database support TLSv1.3

Info

• SQLx version: 0.7.2
• SQLx features enabled: "postgres", "runtime-tokio-rustls"
• Database server and version: Postgres <16.0>
• Operating system: any
• rustc --version: rustc 1.73.0 (cc66ad468 2023-10-03)

[abonander]

Likely not a bug. Rustls (via webpki) only supports x.509v3 certificates: rustls/webpki#29 (comment)

You should ask railway to get new TLS certificates. Or just use native-tls.