server: Fix issues with remote schemas over TLS

CHANGELOG.md

@@ -16,6 +16,7 @@ keys in the response body.
 - server: add "resource_version" field to metadata for concurrency control - disable lookup during migrations
 - server: fix issue with queries on character column types (close #6217)
 - server: optimize resolving source. Resolving a source would create connection pools every time. Optimize that to re-create connection pools only when necessary. (#609)
+- server: fix issues with remote schema introspection and queries over TLS.
 
 ## v1.4.0-alpha.1
 

pro/server/src/HasuraPro/App.hs

@@ -95,6 +95,7 @@ import qualified HasuraPro.Redis.LeakyBucket               as LeakyBucket
 import qualified Language.GraphQL.Draft.Parser             as GQL
 import qualified Language.GraphQL.Draft.Syntax             as GQL
 import qualified Network.HTTP.Client                       as HTTP
+import qualified Network.HTTP.Client.TLS                   as HTTP (tlsManagerSettings)
 import qualified Network.HTTP.Types                        as HTTP
 import qualified Network.Wai                               as Wai
 import qualified System.Log.FastLogger                     as FL
@@ -888,7 +889,7 @@ initialiseProServeCtx tenantId workerId env pci@ProConnInfo{..}
       pure (_gcHttpManager, pool, rebuildableSchemaCache, cacheInitStartTime, schemaSyncListenerThread, schemaSyncEventRef, dbId)
 
     MetadataStorageModeExternal pool (schemaSyncListenerThread, schemaSyncEventRef) -> do
-      httpManager <- liftIO $ HTTP.newManager HTTP.defaultManagerSettings
+      httpManager <- liftIO $ HTTP.newManager HTTP.tlsManagerSettings
       defaultSrcCfg <- mkDefaultSourceConfig
       (rebuildableSchemaCache, cacheInitStartTime) <-
         initSchemaCache httpManager serverConfigCtx logger proLogger pgLogger pool defaultSrcCfg