aws/rds: Switch AWS RDS CA bundle to the officially documented URL (#3307)

toadjaune · web-flow · commit 55ed7f7110b5 · 2023-08-24T09:31:22.000-07:00
diff --git a/aws/rds/rds.go b/aws/rds/rds.go
@@ -41,7 +41,7 @@ type CertPoolProvider interface {
 }
 
 // caBundleURL is the URL to the public RDS Certificate Authority keys.
-const caBundleURL = "https://s3.amazonaws.com/rds-downloads/rds-combined-ca-bundle.pem"
+const caBundleURL = "https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem"
 
 // CertFetcher pulls the RDS CA certificates from Amazon's servers. The zero
 // value will fetch certificates using the default HTTP client.

Original file line number	Diff line number	Diff line change
`@@ -41,7 +41,7 @@ type CertPoolProvider interface {`
`41`	`41`	`}`
`42`	`42`
`43`	`43`	`// caBundleURL is the URL to the public RDS Certificate Authority keys.`
`44`		`-const caBundleURL = "https://s3.amazonaws.com/rds-downloads/rds-combined-ca-bundle.pem"`
	`44`	`+const caBundleURL = "https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem"`
`45`	`45`
`46`	`46`	`// CertFetcher pulls the RDS CA certificates from Amazon's servers. The zero`
`47`	`47`	`// value will fetch certificates using the default HTTP client.`