Proper implementation of `sslmode=verify-full`

[cyangle]

Given a lot of people use cleartext auth method to connect to DBs hosted by Azure and CockroachLabs.

I think it's time to implement sslmode=verify-full to protect these use cases.

[will]

Yes, this would be a good feature, and I'd be happy to help someone write it.

[steve-bitdotio]

Does crystal-pg support sslmode=require? I am currently unable to connect to a database that requires SSL via crystal-pg and I am wondering if the issue is related.