PostgreSQL + SSL DSN?

[Seth Johnson]

Is it possible using Railo to create a data source pointing to a PostgreSQL database that requires SSL on a remote server using Railo?

Thank you,

Seth

[Chris Blackwell]

yes, but you have to configure the datasource as type "other"

class: org.postgresql.Driver

connection string: jdbc:postgresql://host:port/database?ssl=true&sslfactory=org.postgresql.ssl.NonValidatingFactory

This is one of those situations where it'd be really useful to have an "additional params" field in predefined datasource types (like ACF does ;)

Chris

--
Need help right now? Why not have one of the Railo Team help you directly: http://www.getrailo.com/index.cfm/consulting/
---
You received this message because you are subscribed to the Google Groups "Railo" group.
For more options, visit https://groups.google.com/groups/opt_out.
 
 

[Igal Sapir]

@Chris -- can you open a Feature Request for that in the JIRA?

Thanks

--
typos, misspels, and other weird words brought to you courtesy of my mobile device and its auto-(in)correct feature.

[Seth Johnson]

Sorry for my ignorance, do I then have to copy the client crt files into a directory on the server somewhere?  I'm on Ubuntu 12.04 and Railo 4.

Thanks!

Seth

You received this message because you are subscribed to a topic in the Google Groups "Railo" group.

[Chris Blackwell]

Nope, because you use the NonValidatingFactory

This doesn't check the validity of the ssl certificate that the postgres server presents, making it really easy to setup, at the expense of complete security

The alternative is to install the certificate on your railo server, to that see the docs here

Chris

[Chris Blackwell]

done - https://issues.jboss.org/browse/RAILO-2366

[Igal @ getRailo.org]

thank you :)

[Seth Johnson]

Great Chris, thank you for the information.

Seth

[Seth Johnson]

That worked perfectly, for my next trick I need to programmatically create these "other" datasources on the fly.  Looking at the documentation for Railo's cfadmin tag it looks like I can update and verify datasources, but not necessarily create datasources.  Do anyone know if that is the case?  I also read somewhere that there is a newDatasource() function you can use to create per app datasources, but I could not find any documentation on that function.

Thanks,

Seth

[Jochem van Dieten]

cfadmin action="updateDatasource" works for creating a new datasource as well. Just give name and newname both the value of the datasource you want to create.

Jochem

Jochem van Dieten
http://jochem.vandieten.net/

[Seth Johnson]

Perfect, thank you!

Seth

[Chris Blackwell]

Seth, if you're using Railo 4.1 you can actually specify the datasource directly in Application.cfc.

I've been using this for a little project i'm working on that uses heroku and parses the db connection string from an environment variable.

You can see an example here, The example is for MySQL but you should get the idea

Chris

[Seth Johnson]

Nice, this should work well.  I don't necessarily want to create hundreds of datasources if I don't have to, so if this works dynamically it will be perfect.

[to...@3lll.asia]

Hi Chris

Thanks for the info on postgresql...

I'm trying to do the same with MySQL using railo-server.xml

<data-source allow="511" blob="false" class="org.gjt.mm.mysql.Driver" clob="false" connectionTimeout="1" custom="useUnicode=true&amp;characterEncoding=UTF-8&amp;useLegacyDatetimeCode=true" database="food13" dbdriver="MySQL" dsn="jdbc:mysql://{host}:{port}/{database}" host="xxx.xxx.xxx.xxx" metaCacheTimeout="60000" name="xxxxx" password="encrypted:xxxxxxx" port="3306" storage="false" username="root" validate="false"/></data-sources>

How would I incorporate the NonValidatingFactory and other SSL parameters within this file?

TIA

[Chris Blackwell]

NonValidatingFactory is a postgres class, it doesn't apply to mysql. 

are you trying to connect to a mysql database that is using an ssl secured connection?

--
Did you find this reply useful? Help the Railo community and add it to the Railo Server wiki at https://github.com/getrailo/railo/wiki

---
You received this message because you are subscribed to the Google Groups "Railo" group.

To view this discussion on the web visit https://groups.google.com/d/msgid/railo/fff325eb-4a42-4145-84b4-3053e540ed07%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[to...@3lll.asia]

Hi Chris

Yes I am and need to put the ssl information into the railo-server.xml file...