feat(ca): update rds certs

briancaffey · Feb 28, 2024 · f5a7d0a · f5a7d0a
1 parent d25b261
commit f5a7d0a
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/backend/Dockerfile b/backend/Dockerfile
@@ -14,7 +14,7 @@ RUN pip install "poetry==$POETRY_VERSION"
 COPY poetry.lock pyproject.toml /code/
 
 FROM base AS prod
-RUN curl https://s3.amazonaws.com/rds-downloads/rds-combined-ca-bundle.pem -o /usr/local/share/rds-combined-ca-bundle.pem
+RUN curl https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem -o /usr/local/share/global-bundle.pem
 RUN POETRY_VIRTUALENVS_CREATE=false poetry install --only main
 COPY . /code
 RUN chown -R app:app /code

diff --git a/backend/backend/settings/production.py b/backend/backend/settings/production.py
@@ -6,7 +6,7 @@
 
 DATABASES["default"]["OPTIONS"] = {
     "sslmode": "verify-full",
-    "sslrootcert": "/usr/local/share/rds-combined-ca-bundle.pem",
+    "sslrootcert": "/usr/local/share/global-bundle.pem",
 }
 
 # add django-storages to INSTALLED_APPS