Invalid Certificate Validation: Validation Result is Always Positive in SSLConfig.lambda.lambda line 63, CWE 295

[aleeee]

hi all, PostgresqlConnectionFactory create() method is disabling the sslMode and this caused shiftleft security scan error. am i missing something on the configuration? please see my jooq dslContext bean setup and let me know how to resolve this. thank you

` private SSLConfig sslConfig = new SSLConfig(SSLMode.DISABLE, null, null);
https://github.com/pgjdbc/r2dbc-postgresql/blob/main/src/main/java/io/r2dbc/postgresql/client/SSLConfig.java#L64

 @Bean
public DSLContext dslContext() {
    return DSL.using( new TransactionAwareConnectionFactoryProxy(databaseClient.getConnectionFactory()), SQLDialect.valueOf(dialect),
            new Settings().withRenderFormatted(true).withExecuteLogging(true).withStatementType(StatementType.STATIC_STATEMENT));
}`

[mp911de]

SSL is disabled when:

1. The client uses a local Unix domain socket connection
2. SSL mode is disabled. This is the default setting unless the configuration specifies to use SSL.