Re: [GENERAL] JDBC connection test with SSL on PG 9.2.1 server

On Friday, February 01, 2013 7:53 PM Adrian Klaver wrote:
>On 02/01/2013 06:06 AM, Hari Babu wrote:
>>
>> We tried the approach as suggested by you but still it is not working as shown in the below log (I had enabled logLevel as 1)
>> keystore passowrd is qwerty
>> 19:26:22.666 (1) PostgreSQL 9.2 JDBC4 (build 1002)
>> 19:26:23.451 (1) Receive Buffer Size is 43808
>> 19:26:23.452 (1) Send Buffer Size is 25386
>> getConnection returning driver[className=org.postgresql.Driver,org(dot)postgresql(dot)Driver(at)3f7fa65e]
>> Connection1 successful! Conn1:org(dot)postgresql(dot)jdbc4(dot)Jdbc4Connection(at)6baa9f99
>> null
>> wrongqwerty
>> DriverManager.getConnection("jdbc:postgresql://127.0.0.1:15432/postgres")
>> trying driver[className=sun.jdbc.odbc.JdbcOdbcDriver,sun(dot)jdbc(dot)odbc(dot)JdbcOdbcDriver(at)3597a37c]
>> *Driver.connect (jdbc:postgresql://127.0.0.1:15432/postgres)
>> trying driver[className=org.postgresql.Driver,org(dot)postgresql(dot)Driver(at)3f7fa65e]
>> 19:26:23.835 (2) PostgreSQL 9.2 JDBC4 (build 1002)
>> 19:26:23.847 (2) Receive Buffer Size is 43808
>> 19:26:23.848 (2) Send Buffer Size is 25386
>> getConnection returning driver[className=org.postgresql.Driver,org(dot)postgresql(dot)Driver(at)3f7fa65e]
>> Connection2 successful! Conn2:org(dot)postgresql(dot)jdbc4(dot)Jdbc4Connection(at)2e958bb8
>>
>> Connect OK
>>
>> There is function as SSL_CTX_SETSESSIONCACHEMODE(ctxt, mode) in C library of SSL.
>> Can you please let us know if there is some similar function in JSSE also.

>Per a previous post, have you verified that pg_hba.conf is set up to
>properly handle SSL password connections?

Yes, I have modified the pg_hba.conf as follows to handle the SSL connections.

# IPv4 local connections:
hostssl all all 10.18.0.0/16 cert

please provide your suggestions.

Regards,
Hari babu.