Merge pull request #48 from jiayuan929/fix_ssls

feat: add checkHostName

Author: jiayuan929

backend/conf/settings_env.py

@@ -54,6 +54,9 @@
     if default_cert_file and default_key_file:
         default_ssl_options["cert"] = default_cert_file
         default_ssl_options["key"] = default_key_file
+    # 跳过主机名/IP 验证，会降低安全性，正式环境不能开启
+    check_hostname = env.bool("BK_PAAS_DATABASE_TLS_CHECK_HOSTNAME", True)
+    default_ssl_options["check_hostname"] = check_hostname
 
     if "OPTIONS" not in DATABASES["default"]:
         DATABASES["default"]["OPTIONS"] = {}