fix: disable hostname verification if connecting over an IP literal (#643)

* fix: disable hostname verification if connecting over an IP literal

* Update util.test.ts

---------

Co-authored-by: Div Arora <[email protected]>

Author: kevcodez

src/internal/database/util.ts

@@ -1,12 +1,13 @@
 import { logger } from '@internal/monitoring'
+import { ConnectionOptions } from 'tls'
 
 export function getSslSettings({
   connectionString,
   databaseSSLRootCert,
 }: {
   connectionString: string
   databaseSSLRootCert: string | undefined
-}): { ca: string } | undefined {
+}): ConnectionOptions | undefined {
   if (!databaseSSLRootCert) return undefined
 
   try {
@@ -15,7 +16,7 @@ export function getSslSettings({
     // in case the hostname is an IP address
     const url = new URL(connectionString)
     if (url.hostname && isIpAddress(url.hostname)) {
-      return undefined
+      return { ca: databaseSSLRootCert, rejectUnauthorized: false }
     }
   } catch (err) {
     // ignore to ensure this never breaks the connection in case of an invalid URL

src/test/database/util.test.ts

@@ -23,13 +23,13 @@ describe('database utils', () => {
       ).toBeUndefined()
     })
 
-    test('should return no SSL settings if hostname is an IP address', () => {
+    test('should return SSL settings if hostname is an IP address', () => {
       expect(
         getSslSettings({
           connectionString: 'postgres://foo:[email protected]:5432/postgres',
           databaseSSLRootCert: '<cert>',
         })
-      ).toBeUndefined()
+      ).toStrictEqual({ ca: '<cert>', rejectUnauthorized: false })
     })
 
     test('should return SSL settings if hostname is not an IP address', () => {