Re: ssl connection issues - Mailing list pgsql-jdbc

From Craig Ringer
Subject Re: ssl connection issues
Date
Msg-id CAMsr+YGPkivLkDFdbUSuAxLnM3W2+Qu+bfcij1DB8kWZMVqUaw@mail.gmail.com
Whole thread Raw
In response to ssl connection issues  (Gabriele Bulfon <gbulfon@sonicle.com>)
Responses Re: ssl connection issues  (Dave Cramer <pg@fastcrypt.com>)
List pgsql-jdbc
On 13 September 2018 at 20:23, Gabriele Bulfon <gbulfon@sonicle.com> wrote:
Hello,
 
I recently configured Postgresql 9.0.9 with SSL only "on" and all its needed server certificates.
I then created the client certificates and started working with them from a windows client.
 
At first I used them with tools like Navicat, just specified the 3 certs files (key,crt and root.crt) in the ssl pane, worked fine.
 
Then I tried with ODBC, placed the files in %APPDATA%/postgresql with correct names (postgresql.key, postgresql.crt, root.crt), created the connection and tested it, worked fine.
 
Last I tried with jdbc, thinking it would have been so easy: I'm fighting for 2 days with lots of different issues.
After some messing, I also finally discovered that, different from odbc, it would look for a pk8 file (why this difference?).

AFAIK it's largely historical, and due to now-lifted limitations in JSSE.

You should probably use sslfactory=org.postgresql.ssl.LibPQFactory and possibly specify explicit paths for the sslcert and sslkey parameters.

This seems to be undocumented, unfortunately.


--
 Craig Ringer                   http://www.2ndQuadrant.com/
 PostgreSQL Development, 24x7 Support, Training & Services

pgsql-jdbc by date:

Previous
From: Dave Cramer
Date:
Subject: Re: ssl connection issues
Next
From: Gabriele Bulfon
Date:
Subject: Re: ssl connection issues