Skip to main content
Question

JDBC over SSL

  • February 12, 2019
  • 2 replies
  • 17 views
MaciejPaliwoda
Forum|alt.badge.img+2

Hello.
I managed to properly configure SSL Client Server connection (SSL_Type = Server Only). Can easily connect to via VSQL (from local and remote machines).
However I encountered a serious problem while connecting via JDBC.

In customer's environment Icannot change and add self-signed certificates to a truststores. System variable JAVA_OPTS="-Djavax.net.ssl.trustStore=" seems not working as well (for DBVis, Dbeaver).

hence my question is :
do we have "hidden jdbc parameter" that works like -m/--sslmode for vsql? Postgress dirver has this option implemented and working - but functionality is limited to postrgress-vertica compatible features...

    2 replies

    chaima
    Forum|alt.badge.img+2
    • chaima
    • Participating Frequently
    • February 12, 2019
    Hi Maciej,
    There is a driver property SSL in Dbeaver and DBViz, have you tried to set it to true?
    They refer to it in this Kb article for Dbeaver integration: https://www.vertica.com/kb/DbeaverTT/Content/Partner/DbeaverTT.htm
    They describe how to set up SSL too( I haven't tested this)
    Also maybe try to add the options: -Djavax.net.ssl.trustStore= .... To dbeaver.ini and dbvis.vmoptions and see if it helps.
    Chaima
    MaciejPaliwoda
    Forum|alt.badge.img+2
    • MaciejPaliwoda
    • Author
    • Participating Frequently
    • February 17, 2019

    Hi Chaima,
    Thanks for your answer!
    Yes, I tried this and made it working on my computer. However in the customer Env. We cannot modify anything in Program Files dir (as we do not have admin rights).

    SSL parameter set to true forces communiccation to be secure. I tried set the option -Djavax.... via JAVA_OPTS variable - but it seems do not work in some of the java clients we need to add those option to a client/app ini files - hence it is decreasing flexibility of managibility.

    Still scrolling?
    Ask a question
    Terms & ConditionsAccessibility statement