I see that the generated certificate is not working in pgAdmin and psql. So I wanted a way by which I could make it work there as well. As ANS.1 DER is a supported format for libpq, I suppose that this certificate should work here as well.
Also as suggested checking in pgjdbc as well. On Wed, Feb 7, 2024 at 8:22 PM Joe Conway <m...@joeconway.com> wrote: > On 2/7/24 06:42, just madhu wrote: > > On further investigation, > > /With certificate generated as below. JDBC connection is successful./ > > openssl pkcs8 -topk8 -inform PEM -in client.key -outform DER -out > > client.pk8 -passout pass:foobar / -v1 PBE-MD5-DES > > > > But a connection from pgAdmin (connection failed: > > \SSLCerts\pk8_pass\client_pass_PBE.pk8": no start line) and psql(psql: > > error: could not load private key file "client_pass_PBE.pk8": > > unsupported) is failing > > > > Is there a common way in which certificate with passwords can be > > created for both libpq and jdbc ? > > > You may want to check with the pgjdbc project on github rather than (or > in addition to?) here; see: > > https://github.com/pgjdbc/pgjdbc/issues > > Joe > > > On Wed, Feb 7, 2024 at 3:17 PM just madhu <justvma...@gmail.com > > <mailto:justvma...@gmail.com>> wrote: > > > > Hi , > > > > postgresql-42.7.1.jar > > > > Trying to use establish a connection using PKCS8 certificate created > > with password. > > > > /openssl pkcs8 -topk8 -inform PEM -in client.key -outform DER -out > > client.pk8 -passout pass:foobar > > / > > > > I set the properties as below: > > /.../ > > /sslProperties.setProperty("sslkey", "client.pk8"); > > sslProperties.setProperty("sslpassword","foobar");/ > > /.../ > > /Connection connection = DriverManager.getConnection(jdbcUrl, > > sslProperties); > > / > > /..../ > > /This is failing with the error:/ > > /org.postgresql.util.PSQLException: SSL error: Connection reset > > at org.postgresql.ssl.MakeSSL.convert(MakeSSL.java:43) > > at > > > > org.postgresql.core.v3.ConnectionFactoryImpl.enableSSL(ConnectionFactoryImpl.java:584) > > at > > > > org.postgresql.core.v3.ConnectionFactoryImpl.tryConnect(ConnectionFactoryImpl.java:168) > > / > > /.../ > > > > Regards, > > Madhu > > > > -- > Joe Conway > PostgreSQL Contributors Team > RDS Open Source Databases > Amazon Web Services: https://aws.amazon.com > >
