Re: ssl connection strangely stops working

From: zhong ming wu <mr(dot)z(dot)m(dot)wu(at)gmail(dot)com>
To: pgsql-jdbc(at)postgresql(dot)org
Subject: Re: ssl connection strangely stops working
Date: 2011-02-05 14:31:30
Message-ID: AANLkTinVK_2PsizR_HhfB-g=eS+4k0Tn3PTzxFQnMDSk@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-jdbc

On Sat, Feb 5, 2011 at 3:58 AM, Radosław Smogura
<rsmogura(at)softperience(dot)eu> wrote:
> I don't think JDBC driver use custom SSL "validators" including host name and
> certificate chains, if you don't specify one with socket factory. It lies on
> this what is available in JVM. It's looks like in this way Sun SSL sockets
> works.

Very likely that the settings is in JVM. When I wrote above reply I
made it work on Mac.
GF is using JVM of Apple. I am still struggling to make it work on
windows 7 which uses Oracle JVM.

Also in my replied above I meant to write that there is still
hostname/CN mismatch with new unexpired commercial CA.

>
> May I ask what GF version do you use and did you specified trustore passwords
> configuration in -D propperties?
> I actually use GF and I was in need to configure truststores per JVM level (-
> D) to use SSL sockets in (v3.1 releases). I don't like this soulution as it
> require to provide clear text master password.

3.0.latest

password is set via web console -> jdbc -> connection poll ->. Then
I entered password in one of properties form input.
The instructions I followed is in netbeans ecommerce tutorial.

I also dislike using password. With other languages/drivers I use
client certificate. I could not find a way to use client certificate
with jdbc

In response to

Responses

Browse pgsql-jdbc by date

  From Date Subject
Next Message Kevin Grittner 2011-02-05 15:23:52 Re: JDBC CallableStatement bug on functions with return parameter
Previous Message Radosław Smogura 2011-02-05 08:58:37 Re: ssl connection strangely stops working