How to setup Spring/Heroku/postgres SSL datasource

Question

I'm trying to create a datasource from my Heroku/Spring application to postgres.heroku.com postgres database. Here is my applicationContext.xml snippet.

<bean id="securityDataSource" class="org.apache.commons.dbcp.BasicDataSource">
    <property name="driverClassName" value="org.postgresql.Driver"/>
    <property name="url" value="jdbc:postgresql://url/dstabase"/>
    <property name="username" value="user"/>
    <property name="password" value="password"/>
</bean>

But when I run the app, tomcat gives this error:

Cannot create PoolableConnectionFactory (FATAL: no pg_hba.conf entry for host "10.11.12.13", user "username", database "database", SSL off)

How can I configure it to use SSL? I need it in order to stablish a connection against postgres.heroku.com

Got to admit I've never used PostgreSQL or Heroku but am guessing the following should help: devcenter.heroku.com/articles/… — DB5
– DB5, Commented Aug 6, 2012 at 18:55

DB5 · Accepted Answer · 2014-12-05 07:47:09Z

30

You need to extend your JDBC connection URL with the relevant ssl information.

Your JDBC connection URL will need to include the following:

ssl=true&sslfactory=org.postgresql.ssl.NonValidatingFactory

So in your case the URL would be:

jdbc:postgresql://url/dstabase?ssl=true&amp;sslfactory=org.postgresql.ssl.NonValidatingFactory

Source for this info: https://devcenter.heroku.com/articles/connecting-to-relational-databases-on-heroku-with-java#connecting-to-a-database-remotely

edited Dec 5, 2014 at 7:47

answered Aug 7, 2012 at 9:21

DB5

14.1k7 gold badges69 silver badges73 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Markus Over a year ago

this setting opens a SSL connection, but does not validate the certificates. If you have the chance to use certificates as described here: jdbc.postgresql.org/documentation/head/ssl-client.html

womd Over a year ago

for me it worked using ...?ssl=true&&sslfactory=org.postgresql.ssl.DefaultJavaSSLFactory

iaL · Accepted Answer · 2017-10-25 13:25:23Z

5

Following worked for me:

jdbc:postgresql://url/databaseName?sslmode=require&amp;sslfactory=org.postgresql.ssl.NonValidatingFactory

I'd to change ssl=true to sslmode=require

answered Oct 25, 2017 at 13:25

iaL

38610 silver badges19 bronze badges

Comments

Rhino · Accepted Answer · 2013-09-01 02:49:38Z

4

When connecting to Heroku Postgres with jdbc, you will also sometimes get an error unless you add the SSL parameters to the url:

ssl=true
sslfactory=org.postgresql.ssl.NonValidatingFactory

answered Sep 1, 2013 at 2:49

Rhino

1018 bronze badges

Comments

nsthethunderbolt · Accepted Answer · 2014-07-12 18:32:08Z

It worked for me:

  <bean id="securityDataSource" class="org.apache.commons.dbcp.BasicDataSource">
        <property name="driverClassName" value="org.postgresql.Driver"/>
        <property name="url" value="jdbc:postgresql://host:port/database?ssl=true&amp;sslfactory=org.postgresql.ssl.NonValidatingFactory"/>
        <property name="username" value="user"/>
        <property name="password" value="password"/>
    </bean>

The mistake I was doing was using an & instead of & (silly I know)

 ?ssl=true&amp;sslfactory=org.postgresql.ssl.NonValidatingFactory

and yes the link definitely is helpful: https://devcenter.heroku.com/articles/connecting-to-relational-databases-on-heroku-with-java#connecting-to-a-database-remotely

AND Keep in mind: in this link, jdbc:postgres://host.. is used, which might not be suitable for you (use postgresql instead) if No suitable Sql driver error occurs

Collectives™ on Stack Overflow

How to setup Spring/Heroku/postgres SSL datasource

4 Answers 4

2 Comments

Comments

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

4 Answers 4

2 Comments

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related