on azure have found 4 certificates:
cleardb ca certificate client certificate client private key client certificate bundle(for windows only)
i have created truststore
cleardb ca told here how connect remote mysql database via ssl using play framework?
keytool -import -alias mysqlservercacert -file cleardb.pem -keystore truststore.jks
set systems properties this:
system.setproperty("javax.net.ssl.truststore", "path/truststore.jks"); system.setproperty("javax.net.ssl.truststorepassword", "password");
added parameters jdbc url
?usessl=true&requiressl=true&verifyservercertificate=true
but still exception
javax.net.ssl.sslhandshakeexception: sun.security.validator.validatorexception: pkix path building failed: sun.security.provider.certpath.suncertpathbuilderexception: unable find valid certification path requested target
i'm confused. certificate should use. other certificates? appreciate help.
@olegkuts, according cleardb faq enforce client ssl (or x.509) authentication below, think should use cleardb ca certificate if it's got cleardb.
i need additional security options cleardb cluster. how can enforce client ssl (or x.509) authentication?
we operate our own ca, , we’ll happy generate x.509 user authentication certificates account. please send support request (login required) x.509 certificates.
meanwhile, according cleardb & support page (its link java not available, please see rear mysql 5.5 link), need follow mysql connector document 5.5 connecting securely using ssl try again.
Comments
Post a Comment