When non linearizable is set, it can be the first command upon connection

Author: gionatamettifogo

src/drivers/connection-tls.ts

@@ -21,7 +21,7 @@ import {
 import * as tls from 'tls'
 
 /**
- * Implementation of SQLiteCloudConnection that connects to the database using specific Bun APIs
+ * Implementation of SQLiteCloudConnection that connects to the database using specific tls APIs
  * that connect to native sockets or tls sockets and communicates via raw, binary protocol.
  */
 export class SQLiteCloudTlsConnection extends SQLiteCloudConnection {
@@ -50,7 +50,7 @@ export class SQLiteCloudTlsConnection extends SQLiteCloudConnection {
     const connectionOptions = {
       host: config.host,
       port: config.port as number,
-      rejectUnauthorized: false,
+      rejectUnauthorized: true,
       // Server name for the SNI (Server Name Indication) TLS extension.
       // https://r2.nodejs.org/docs/v6.11.4/api/tls.html#tls_class_tls_tlssocket
       servername: config.host

src/drivers/utilities.ts

@@ -39,6 +39,10 @@ export function getInitializationCommands(config: SQLiteCloudConfig): string {
   // first user authentication, then all other commands
   let commands = ''
 
+  if (config.non_linearizable) {
+    commands += 'SET CLIENT KEY NONLINEARIZABLE TO 1; '
+  }
+
   if (config.apikey) {
     commands = `AUTH APIKEY ${config.apikey}; `
   } else {
@@ -57,9 +61,6 @@ export function getInitializationCommands(config: SQLiteCloudConfig): string {
   if (config.zerotext) {
     commands += 'SET CLIENT KEY ZEROTEXT TO 1; '
   }
-  if (config.non_linearizable) {
-    commands += 'SET CLIENT KEY NONLINEARIZABLE TO 1; '
-  }
   if (config.noblob) {
     commands += 'SET CLIENT KEY NOBLOB TO 1; '
   }