Currently, Trillian does not support TLS-encrypted connections when connecting to a PostgreSQL database. This issue tracks the work required to add TLS support, ensuring secure communication between Trillian and PostgreSQL.

Goals:

• Allow users to specify a CA certificate for server validation (sslmode=verify-ca)
• Optionally allow full TLS verification (sslmode=verify-full)
• Maintain backward compatibility for users who do not enable TLS