Re: SSL Problem - Mailing list pgsql-jdbc

From Kris Jurka
Subject Re: SSL Problem
Date
Msg-id Pine.BSO.4.56.0407151311540.21124@leary.csoft.net
Whole thread Raw
In response to Re: SSL Problem  ("Stefano Bonnin" <stefano.bonnin@comai.to>)
Responses problema con el backend
List pgsql-jdbc

On Thu, 15 Jul 2004, Stefano Bonnin wrote:

> 2004-07-15 14:03:40 LOG:  could not load root certificate file
> "/usr/local/pgsql-7.4.2/bin/../../pgsql-7.4.1/data/root.crt": No such file
> or directory
> DETAIL:  Will not verify client certificates.

This is fine.  You do not need a root.crt file.   This is used to
authenticate clients to the server which is optional and not necessary to
establish a SSL connection.

Again the problem seems to be that you have not made the server cert
available to the connecting jvm.  Adding -Djavax.net.debug=ssl to your
java command will produce a lot of debug information, but will likely
confirm this.  The key line will be in the first part of the output where
it displays which trustStore you are using.  The server cert must be in
this file.

Kris Jurka

pgsql-jdbc by date:

Previous
From: "Dario V. Fassi"
Date:
Subject: Re: Very strange Error in Updates
Next
From: tgutierrez@unipamplona.edu.co
Date:
Subject: problema con el backend