设置opengauss数据库SSL单向认证，Navicat能连接，代码报错【测试版本：5.0】

【操作步骤】(请填写详细的操作步骤):
1. 按文档生成自签证书，并放到opengauss中的docker容器中。
2. 设置配置文件，并重启
ssl = on				# (change requires restart)
ssl_cert_file = 'cert/server.crt'		# (change requires restart)
ssl_key_file = 'cert/server.key'		# (change requires restart)
ssl_ca_file = 'cert/cacert.pem'			# (change requires restart)

【预期输出】:Navicat能正常连接，代码能正常连接

【实际输出】:Navicat能正常连接，代码无法连接报错
org.postgresql.util.PSQLException: SSL error: Unsupported or unrecognized SSL message

【原因分析】:
 无法判断

【日志信息】(请附上日志文件、截图、coredump信息):
H:\jdk\jdk-11.0.20\bin\java.exe "-javaagent:N:\IDE\IntelliJ IDEA 2022.2.3\lib\idea_rt.jar=52416:N:\IDE\IntelliJ IDEA 2022.2.3\bin" -Dfile.encoding=UTF-8 @C:\Users\Administrator\AppData\Local\Temp\idea_arg_file1311929417 org.icomnetwork.test.SSL
org.postgresql.util.PSQLException: SSL error: Unsupported or unrecognized SSL message
	at org.postgresql.ssl.MakeSSL.convert(MakeSSL.java:43)
	at org.postgresql.core.v3.ConnectionFactoryImpl.enableSSL(ConnectionFactoryImpl.java:534)
	at org.postgresql.core.v3.ConnectionFactoryImpl.tryConnect(ConnectionFactoryImpl.java:149)
	at org.postgresql.core.v3.ConnectionFactoryImpl.openConnectionImpl(ConnectionFactoryImpl.java:213)
	at org.postgresql.core.ConnectionFactory.openConnection(ConnectionFactory.java:51)
	at org.postgresql.jdbc.PgConnection.<init>(PgConnection.java:225)
	at org.postgresql.Driver.makeConnection(Driver.java:465)
	at org.postgresql.Driver.connect(Driver.java:264)
	at java.sql/java.sql.DriverManager.getConnection(DriverManager.java:677)
	at java.sql/java.sql.DriverManager.getConnection(DriverManager.java:189)
	at org.icomnetwork.test.SSL.main(SSL.java:42)
Caused by: javax.net.ssl.SSLException: Unsupported or unrecognized SSL message
	at java.base/sun.security.ssl.SSLSocketInputRecord.handleUnknownRecord(SSLSocketInputRecord.java:457)
	at java.base/sun.security.ssl.SSLSocketInputRecord.decode(SSLSocketInputRecord.java:175)
	at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:111)
	at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1383)
	at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1296)
	at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:416)
	at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:388)
	at org.postgresql.ssl.MakeSSL.convert(MakeSSL.java:41)
	... 10 more

Process finished with exit code 0

【测试代码】:
Properties urlProps = new Properties();
		String urls = "jdbc:postgresql://127.0.0.1:5432/XXX";

/**
		 * ==================  示例1  使用NonValidatingFactory通道
		 */
		urlProps.setProperty("sslfactory","org.postgresql.ssl.NonValidatingFactory");
		urlProps.setProperty("user", "XXX");
		urlProps.setProperty("password", "XXXX");
		urlProps.setProperty("ssl", "true");

try {
			Class.forName("org.postgresql.Driver").newInstance();
		} catch (Exception e) {
			e.printStackTrace();
		}
		try {
			Connection conn;
			conn = DriverManager.getConnection(urls,urlProps);
			conn.close();
		} catch (Exception e) {
			e.printStackTrace();
		}

openGauss/docs

内容风险标识

评论 (8)

openGauss/docs .gitee-modal { width: 500px !important; }

内容风险标识