row editing

2026-10-21 09:47:53 +01:00
parent 0a4cca2b41
commit 60cbf790db
5 changed files with 35 additions and 14 deletions
@@ -2550,8 +2550,12 @@ struct ConnectionEditor: View {
                    TextField("Default Schema", text: $profile.database)
                }
                Section("Secure Transport") {
-                    Toggle("Require verified TLS for direct remote connections", isOn: $profile.useTLS)
+                    Toggle("Verify server identity (recommended)", isOn: $profile.verifyTLS)
                        .disabled(profile.useSSHTunnel)
+                    if !profile.verifyTLS && !profile.useSSHTunnel {
+                        Text("Encrypted TLS (MySQL REQUIRED): traffic is encrypted, but the server identity is NOT verified. Only use with servers you trust.")
+                            .font(.caption).foregroundStyle(.orange)
+                    }
                    Toggle("Connect through SSH tunnel", isOn: $profile.useSSHTunnel)
                    if profile.useSSHTunnel {
                        TextField("SSH Host", text: $profile.sshHost)
@@ -2561,7 +2565,7 @@ struct ConnectionEditor: View {
                        Text("Uses your system SSH keys and known_hosts. MySQL hostname is resolved from the SSH server.")
                            .font(.caption).foregroundStyle(.secondary)
                    } else {
-                        Text("Direct remote MySQL uses certificate-verified TLS. The server certificate must match its hostname and be trusted by macOS.")
+                        Text(profile.verifyTLS ? "Direct remote MySQL uses verified TLS." : "Direct remote MySQL uses encrypted TLS without server identity verification.")
                            .font(.caption).foregroundStyle(.secondary)
                    }
                }