Re: SSL confirmation - (could not accept SSL connection: sslv3 alert certificate unknown ) - Mailing list pgsql-general

From Andrew M
Subject Re: SSL confirmation - (could not accept SSL connection: sslv3 alert certificate unknown )
Date
Msg-id C721A366-47BD-11D9-8DF8-0003938366A4@jibeya.com
Whole thread Raw
In response to Re: SSL confirmation - No trusted certificate found  (Kris Jurka <books@ejurka.com>)
Responses Re: SSL confirmation - (could not accept SSL connection:
List pgsql-general
Hi,
after much research to various mail-lists, it seems that there is a bug
in the beta versions of postgreSQL 8 which is causing the problem. Is
there anyway to create a SSLv3 specific certificate?

regards

Andrew
On 6 Dec 2004, at 12:28, Kris Jurka wrote:

>
>
> On Mon, 6 Dec 2004, Andrew M wrote:
>
>> jdbc:postgresql://localhost:5432/mydatabase?ssl
>>
>> When I launch Jboss, which handles the connection to postgresql, I get
>> the following error:
>>
>> javax.net.ssl.SSLHandshakeException:
>> sun.security.validator.ValidatorException: No trusted certificate
>> found
>>
>
> Difficult to say.  Perhaps JBoss is deciding to use an alternate
> truststore?  Perhaps it doesn't like your cert setup.  I would suggest
> first running a simple client program to test that it's working first.
> Also adding -Djavax.net.debug=ssl to the java command will help
> debugging
> ssl problems.
>
> Further the 8.0 JDBC driver can create SSL connnections without doing
> authentication by adding using an additional url parameter:
>
> sslfactory=org.postgresql.ssl.NonValidatingFactory
>
> You should try to get it to authenticate correctly, but this is another
> useful test point.
>
> Kris Jurka
>


pgsql-general by date:

Previous
From: "David Esposito"
Date:
Subject: Re: Performance tuning on RedHat Enterprise Linux 3
Next
From: Richard Ellis
Date:
Subject: Re: reclaiming diskspace bloat w/near-zero downtime