Re: SSL confirmation - No trusted certificate found

From: Andrew M <andrew(at)jibeya(dot)com>
To: pgsql-general(at)postgresql(dot)org
Subject: Re: SSL confirmation - No trusted certificate found
Date: 2004-12-06 13:07:27
Message-ID: C78829F2-4787-11D9-88C3-0003938366A4@jibeya.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general pgsql-jdbc

Ok,
I have just looked at my postgreSQL terminal window and seen the
following message:

sslv3 alert certificate unknown

Could this mean that the certificate is of the wrong type??

regards

Andrew
On 6 Dec 2004, at 12:50, Andrew M wrote:

> Kriss,
> I have implemented your earlier suggestion:
>
> sslfactory=org.postgresql.ssl.NonValidatingFactory
>
> and no error are generated, so I presume that the connection to the
> database is now ssl'd. So why bother going through the headache of
> creating a certificate if I can do it like mentioned above?
>
> regards
>
> Andrew
> On 6 Dec 2004, at 12:28, Kris Jurka wrote:
>
>>
>>
>> On Mon, 6 Dec 2004, Andrew M wrote:
>>
>>> jdbc:postgresql://localhost:5432/mydatabase?ssl
>>>
>>> When I launch Jboss, which handles the connection to postgresql, I
>>> get
>>> the following error:
>>>
>>> javax.net.ssl.SSLHandshakeException:
>>> sun.security.validator.ValidatorException: No trusted certificate
>>> found
>>>
>>
>> Difficult to say. Perhaps JBoss is deciding to use an alternate
>> truststore? Perhaps it doesn't like your cert setup. I would suggest
>> first running a simple client program to test that it's working first.
>> Also adding -Djavax.net.debug=ssl to the java command will help
>> debugging
>> ssl problems.
>>
>> Further the 8.0 JDBC driver can create SSL connnections without doing
>> authentication by adding using an additional url parameter:
>>
>> sslfactory=org.postgresql.ssl.NonValidatingFactory
>>
>> You should try to get it to authenticate correctly, but this is
>> another
>> useful test point.
>>
>> Kris Jurka
>>
>> ---------------------------(end of
>> broadcast)---------------------------
>> TIP 3: if posting/reading through Usenet, please send an appropriate
>> subscribe-nomail command to majordomo(at)postgresql(dot)org so that
>> your
>> message can get through to the mailing list cleanly
>>
>
>
> ---------------------------(end of
> broadcast)---------------------------
> TIP 7: don't forget to increase your free space map settings
>

In response to

Browse pgsql-general by date

  From Date Subject
Next Message alex 2004-12-06 13:17:29 Re: DBD::PgSPI 0.02
Previous Message Kris Jurka 2004-12-06 12:57:31 Re: SSL confirmation - No trusted certificate found

Browse pgsql-jdbc by date

  From Date Subject
Next Message Kris Jurka 2004-12-06 13:24:39 Re: Patch for jdbc escaped functions
Previous Message Bjørn T Johansen 2004-12-06 13:05:55 Re: Strange change in my where clause?