Re: I am receiving an error - Mailing list pgsql-jdbc

From Dave Cramer
Subject Re: I am receiving an error
Date
Msg-id CADK3HHJ6v+OVB_uvHJ6LHQtCKuAjmkezPaW9cQ88Nzo477soeQ@mail.gmail.com
Whole thread Raw
In response to Re: I am receiving an error  (Vladimir Sitnikov <sitnikov.vladimir@gmail.com>)
List pgsql-jdbc




On Tue, 23 Apr 2019 at 11:33, Vladimir Sitnikov <sitnikov.vladimir@gmail.com> wrote:
Does that mean we want to add more thorough explanation to the exception message itself?

Of course we can't add URLs there (as they happen to change over time), however we might do better exception-wize.

Should the default exception suggest to check hostname vs certificate?
E.g. something behind the words

>The connection URL specifies test.cname.illinois.edu:5432,
>however the server provided certificate for a different hostname:
> aws.postgresql.server.amazonaws.com. It means either the certificate is invalid or the hostname in the connection URL must be different.
> pgjdbc aborts such connections in order to avoid man-in-the-middle attacks.
> Please configure the proper certificate and/or use proper hostname in the connection URL
> Hostname verification can be temporary disabled, however it would open your service to man-in-the-middle attacks, so you probably don't want to disable the verification.

WDYT?

Vladimir

I suppose that makes sense.  

pgsql-jdbc by date:

Previous
From: Vladimir Sitnikov
Date:
Subject: Re: I am receiving an error
Next
From: Dave Cramer
Date:
Subject: [pgjdbc/pgjdbc] 95ba7b: Update backend_protocol_v4_wanted_features.md