Re: I am receiving an error
Dave Cramer <[email protected]> Tue, 23 Apr 2019 11:34:40 -0400
| Newsgroups | gmane.comp.db.postgresql.jdbc |
|---|---|
| Message-ID | <CADK3HHJ6v+OVB_uvHJ6LHQtCKuAjmkezPaW9cQ88Nzo477soeQ@mail.gmail.com> |
On Tue, 23 Apr 2019 at 11:33, Vladimir Sitnikov <[email protected]> wrote: > Does that mean we want to add more thorough explanation to the exception > message itself? > > Of course we can't add URLs there (as they happen to change over time), > however we might do better exception-wize. > > Should the default exception suggest to check hostname vs certificate? > E.g. something behind the words > > >The connection URL specifies test.cname.illinois.edu:5432, > >however the server provided certificate for a different hostname: > > aws.postgresql.server.amazonaws.com. It means either the certificate is > invalid or the hostname in the connection URL must be different. > > pgjdbc aborts such connections in order to avoid man-in-the-middle > attacks. > > Please configure the proper certificate and/or use proper hostname in > the connection URL > > Hostname verification can be temporary disabled, however it would open > your service to man-in-the-middle attacks, so you probably don't want to > disable the verification. > > WDYT? > > Vladimir > I suppose that makes sense. Dave Cramer [email protected] www.postgresintl.com