-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Ian,
On 2/19/13 3:19 PM, Ian Pilcher wrote: > I am writing a custom SSLSocketFactory for use with the PostgreSQL > JDBC driver. This custom factory will allow the administrator to > specify the CA certificate used to validate the PostgreSQL server's > SSL certificate, on a per-datasource basis. > > Assuming that my SSLSocketFactory will be installed as a library > (in $CATALINA_HOME/lib), what is the proper place in the Tomcat > directory hierarchy to put the CA certificate(s) that it uses? Short of putting it into the "endorsed" directory, you should put it into CATALINA_BASE/lib, right alongside of your JDBC library. I'm surprised that the PostgreSQL JDBC driver doesn't offer the ability to set the trust store for its SSL connections. For example, MySQL's Connector/J supports the "trustCertificateKeyStoreURL" connection property which lets you specify an alternate trust store (http://dev.mysql.com/doc/refman/5.0/en/connector-j-reference-configuration-properties.html). I couldn't find any documentation whatsoever for PostgreSQL's JDBC driver and the properties it supports. Not even a brief configuration reference on the website. Shame. Perhaps the proper documentation can be found within the download package. Just curious: how do you expect to install your SSLSocketFactory? - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEAREIAAYFAlEm9wUACgkQ9CaO5/Lv0PAEsgCgrBGC9oWmJtP4Bn76uOK187GR k08An0ciczgDZMpbdwods9sokjERq58x =+qvk -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
