mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-10-20 16:03:21 +00:00
Ruben FiszelandClaude Opus 4.8
3bfd5eb710
PgDatabase::connect_inner lumped require/verify-ca/verify-full together and, whenever no root_certificate_pem was configured, set danger_accept_invalid_certs + danger_accept_invalid_hostnames — so a resource explicitly configured with sslmode=verify-full (or verify-ca) silently got an encrypted but completely UNVERIFIED connection (MITM-able). Now verification follows libpq semantics: - require: encrypt only, no certificate verification (unchanged) - verify-ca: verify the certificate chain, but not the hostname - verify-full: verify both the certificate chain and the hostname A configured root_certificate_pem is still added to the trust store for all three modes. Note: a verify-full/verify-ca resource whose server cert does NOT chain to a trusted root and that did not provide root_certificate_pem will now fail to connect — which is the correct, secure behavior (such a config was previously accepting any certificate). Those should provide root_certificate_pem or, if encryption-without-verification is genuinely intended, use sslmode=require. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Windmill Backend
This folder holds all backend components, the src/ folder only contains files used to build the "root" binary.
Components
| name | description |
|---|---|
| windmill-api | The API server, exposing functionality to other components and the frontend |
| windmill-audit | Contains audit functionality, allowing different components to record important actions |
| windmill-common | Common code shared by all crates |
| windmill-queue | Contains job & flow queuing functionality, commonly written to by the API server and read from by workers |
| windmill-worker | The worker. Used to process and execute flows & jobs. |
| parsers | Contains code to parse signatures in different langauges. |
Compile sqlx for offline ci
cargo sqlx prepare --workspace -- --bin windmill --features enterprise