SEO

Hello all,

I've noticed that when using Java and postgres-jdbc, setting ssl=false
in Properties doesn't get read, and ssl=false and ssl=true both cause
SSL to be tried.

E.g:

String url = "jdbcostgresql://"+host+"/"+database;
Properties props = new Properties();
props.setProperty("user", "blah");
props.setProperty("password", "blah");
props.setProperty("ssl", "false");
props.setProperty("sslfactory",
"org.postgresql.ssl.NonValidatingFactory");
Connection conn = null;
conn = DriverManager.getConnection(url, props);

causes it to throw: org.postgresql.util.PSQLException: The server does
not support SSL. (even though I've said not to try SSL).

String url = "jdbcostgresql://"+host+"/"+database;
Properties props = new Properties();
props.setProperty("user", "blah");
props.setProperty("password", "blah");
// Don't even set these ones below, as they seem to make it
try SSL regardless.
// props.setProperty("ssl", "false");
// props.setProperty("sslfactory",
"org.postgresql.ssl.NonValidatingFactory");
Connection conn = null;
conn = DriverManager.getConnection(url, props);

works fine.

Problem exists both with postgresql-8.2-505.jdbc3.jar and
postgresql-8.2-507.jdbc3.jar

C

--
bash# Got root? Get root. Fast Linux VPS
http://linuxvps.org/

---------------------------(end of broadcast)---------------------------
TIP 1: if posting/reading through Usenet, please send an appropriate
subscribe-nomail command to majordomo@postgresql.org so that your
message can get through to the mailing list cleanly

On Mon, 21 Jan 2008, Calum wrote:

> I've noticed that when using Java and postgres-jdbc, setting ssl=false
> in Properties doesn't get read, and ssl=false and ssl=true both cause
> SSL to be tried.
>

The current implementation sees the mere presence of "ssl" as a request
for ssl, as the original implementation and docs suggested using "?ssl"
alone. At various times we've discussed changing this to be more like
libpq's try/require options, but that's how it is now. So it's not ideal,
but it is working as designed. If you don't want ssl, don't set the
property at all.

Kris Jurka

---------------------------(end of broadcast)---------------------------
TIP 9: In versions below 8.0, the planner will ignore your desire to
choose an index scan if your joining column's datatypes do not
match