Skip to content

[Docs] Prisma 7 Migration guide does not mention SSL defaults changed when moving from rust engine to node-pg #7410

Closed

Description

@arthurfiorette

This issue is kinda a duplicate of prisma/orm#28795 but this one just asks to state this information in the documentation and possibly link users to that issue in case of extra problems.

https://www.answeroverflow.com/m/1415722647827775518

Based on the above thread, it seems that previously, invalid SSL certificates were being ignored by Prisma. Since v7 uses node-pg instead of rust engine, the default have changed and migrating to prisma 7 will start throwing User was denied access on the database 'xxx' errors.

The fix is either keep the previous behavior and set:

new PrismaPg({
  connectionString: process.env.DATABASE_URL,
  ssl: { rejectUnauthorized: false },
})

Or to properly set database certificates using either node --use-openssl-ca or by adding NODE_EXTRA_CA_CERTS environment file.

Activity

  1. changed the title [-][Docs] Prisma 7 Migration guide does not mention SSL defaults changed from rust engine to node-pg[/-] [+][Docs] Prisma 7 Migration guide does not mention SSL defaults changed when moving from rust engine to node-pg[/+] on Dec 17, 2025
  2. Ho-s commented on Dec 24, 2025

    @Ho-s

    I encountered the same issue.

    Environment:

    • Prisma 7.0 + @prisma/adapter-pg
    • AWS RDS PostgreSQL 17
    • Docker + Node.js 22

    Solution that worked for me:
    Using NODE_EXTRA_CA_CERTS environment variable with AWS RDS official certificate:

    # Download AWS RDS certificate
    wget https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem
    
    # Set environment variable
    NODE_EXTRA_CA_CERTS=/path/to/global-bundle.pem

    This way, no need to modify DATABASE_URL. Just set the env var and Node.js automatically trusts the RDS certificate.

    +1 for updating the migration guide to mention this SSL behavior change.

  3. transferred this issue fromprisma/ormon Dec 25, 2025
  4. coderabbitai commented on Dec 25, 2025

    @coderabbitai
    Contributor

    📝 CodeRabbit Plan Mode

    Generate an implementation plan and prompts that you can use with your favorite coding agent.

    • Create Plan
    Examples

    🔗 Similar Issues

    Related Issues

    🔗 Related PRs

    #7052 - fix: update PostgreSQL connection strings to use db.prisma.io [merged]
    #7271 - feat: add mention of mongo support coming for P7 [merged]
    #7277 - fix: add SQLite notes [merged]
    #7297 - Specify prisma.config.ts file location in Prisma 7 upgrade guide [merged]
    #7328 - fix: add callout to resolve studio error [merged]
    #7333 - docs(): more v7 updates [merged]
    #7346 - Update shadow database configuration instructions [merged]
    #7406 - docs: highlight Prisma 7 driver adapter pool defaults and add v6 parity examples [merged]

    👤 Suggested Assignees

    🧪 Issue enrichment is currently in open beta.

    You can configure auto-planning by selecting labels in the issue_enrichment configuration.

    To disable automatic issue enrichment, add the following to your .coderabbit.yaml:

    issue_enrichment:
      auto_enrich:
        enabled: false

    💬 Have feedback or questions? Drop into our discord!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Labels

No labels
No labels

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions