Re: Force ssl connection

From: Adrian Klaver <adrian(dot)klaver(at)gmail(dot)com>
To: Muhammad Bashir Al-Noimi <mbnoimi(at)gmail(dot)com>
Cc: Magnus Hagander <magnus(at)hagander(dot)net>, Jeff Janes <jeff(dot)janes(at)gmail(dot)com>, "pgsql-general(at)postgresql(dot)org" <pgsql-general(at)postgresql(dot)org>
Subject: Re: Force ssl connection
Date: 2013-07-10 13:39:47
Message-ID: 51DD6423.6080206@gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On 07/10/2013 03:20 AM, Muhammad Bashir Al-Noimi wrote:
> On Wed, Jul 10, 2013 at 12:16 PM, Magnus Hagander <magnus(at)hagander(dot)net> wrote:
>> requiressl=0 doesn't mean what you think it means, and that's one
>> reason it has been deprecated since at least 8.2.
>>
>> requiressl=0 means "negotiate. use ssl if the server asks for it, but
>> accept not using ssl". So this will connect without an error both with
>> and without ssl.
>>
>> If you want to enforce ssl, use sslmode=require.
>> If you want to enforce non-ssl, use sslmode=disable.
>
>
> This is exactly what I'm looking for... thanks a lot it works perfectly.

Which is what you had if you followed your own comments:)

db.setHostName("192.168.0.74");
db.setPort(5433);
// set requiressl=1 to enable SSL <--------
db.setConnectOptions("requiressl=0");

>
> --
> Best Regards
> Muhammad Bashir Al-Noimi
>

--
Adrian Klaver
adrian(dot)klaver(at)gmail(dot)com

In response to

Browse pgsql-general by date

  From Date Subject
Next Message dafNi zaf 2013-07-10 14:28:41 Re: dynamic partitioning
Previous Message Kevin Grittner 2013-07-10 12:44:23 Re: Computing count of intersection of two queries (Relational Algebra --> SQL)