Set sslmode to prefer, otherwise it might fail with clusters that don't have the new certificate.

arikfr · web-flow · commit 22aa64571a2e · 2017-10-22T13:27:12.000+03:00
diff --git a/redash/query_runner/pg.py b/redash/query_runner/pg.py
@@ -186,7 +186,7 @@ def _get_connection(self):
                                       host=self.configuration.get('host'),
                                       port=self.configuration.get('port'),
                                       dbname=self.configuration.get('dbname'),
-                                      sslmode='require',
+                                      sslmode='prefer',
                                       sslrootcert=sslrootcert_path,
                                       async=True)
 
