When connecting to h2 server using the ssl url:
jdbc:h2:ssl:localhost/mydatabase
I get the below excpetion:
Exception in thread "main" org.h2.jdbc.
JdbcSQLNonTransientConnectionException: Connection is broken:
"javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target: localhost" [90067-199]
at org.h2.message.DbException.getJdbcSQLException(DbException.java:617)
at org.h2.message.DbException.getJdbcSQLException(DbException.java:427)
at org.h2.message.DbException.get(DbException.java:194)
at org.h2.engine.SessionRemote.connectServer(SessionRemote.java:435)
at org.h2.engine.SessionRemote.connectEmbeddedOrServer(SessionRemote.
java:317)
at org.h2.jdbc.JdbcConnection.<init>(JdbcConnection.java:169)
at org.h2.jdbc.JdbcConnection.<init>(JdbcConnection.java:148)
at org.h2.Driver.connect(Driver.java:69)
at java.sql.DriverManager.getConnection(DriverManager.java:664)
at java.sql.DriverManager.getConnection(DriverManager.java:247)
at org.h2.tools.RunScript.process(RunScript.java:327)
at org.h2.tools.RunScript.runTool(RunScript.java:143)
at org.h2.tools.RunScript.main(RunScript.java:70)
The error message is like the one I found at:
http://h2-database.66688.n3.nabble.com/H2-TCP-server-and-SSL-how-to-use-it-td4032294.html
After some experiments, I figured out that adding
-Djavax.net.ssl.trustStore=$HOME/.h2.keystore
to the commandline of the client resolves the issue.
My questions here is:
- In order to have zero config on clöientside for using anonymous tls,
would it make sense to add this setting to
org.h2.security.CipherFactory.setKeystore function?
--
You received this message because you are subscribed to the Google Groups "H2
Database" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/h2-database/ea9405fc-d925-4388-8c6f-1c39be8fa369%40googlegroups.com.
