Re: SSL Problem

From: "Stefano Bonnin" <stefano(dot)bonnin(at)comai(dot)to>
To: "Kris Jurka" <books(at)ejurka(dot)com>
Cc: <pgsql-jdbc(at)postgresql(dot)org>
Subject: Re: SSL Problem
Date: 2004-07-16 11:17:47
Message-ID: 004101c46b26$862f42b0$0501a8c0@comai04
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-jdbc

Problem solved.

I copied the certificate that I created on the server to the client and then
I execute "keytool" on the client.
So, every time that I install my application on a new PC I have to execute
keytool operation on that machine.

Thaks for the help.
RedS
----- Original Message -----
From: "Kris Jurka" <books(at)ejurka(dot)com>
To: "Stefano Bonnin" <stefano(dot)bonnin(at)comai(dot)to>
Cc: <pgsql-jdbc(at)postgresql(dot)org>
Sent: Thursday, July 15, 2004 8:18 PM
Subject: Re: [JDBC] SSL Problem

>
>
> On Thu, 15 Jul 2004, Stefano Bonnin wrote:
>
> > 2004-07-15 14:03:40 LOG: could not load root certificate file
> > "/usr/local/pgsql-7.4.2/bin/../../pgsql-7.4.1/data/root.crt": No such
file
> > or directory
> > DETAIL: Will not verify client certificates.
>
> This is fine. You do not need a root.crt file. This is used to
> authenticate clients to the server which is optional and not necessary to
> establish a SSL connection.
>
> Again the problem seems to be that you have not made the server cert
> available to the connecting jvm. Adding -Djavax.net.debug=ssl to your
> java command will produce a lot of debug information, but will likely
> confirm this. The key line will be in the first part of the output where
> it displays which trustStore you are using. The server cert must be in
> this file.
>
> Kris Jurka
>
> ---------------------------(end of broadcast)---------------------------
> TIP 5: Have you checked our extensive FAQ?
>
> http://www.postgresql.org/docs/faqs/FAQ.html
>

In response to

Responses

Browse pgsql-jdbc by date

  From Date Subject
Next Message Aaron Mulder 2004-07-16 12:50:59 Re: Adding JDK1.5 removing 1.1 support.
Previous Message Stefano Bonnin 2004-07-16 11:00:50 Fw: SSL Problem