Experimental Physics and
Industrial Control System

"Kasemir, Kay" <[email protected]> · Mon, 6 Jun 2016 13:54:52 +0000

Hi:

In short, I have no idea, especially not for PostgreSQL since I’m not using that.

But it could require some of the following:

1) Adjust the URL that you use to connect to PostgreSQL, the "jdbc://postgresql://..”, to tell the PostgreSQL client library that you want to use SSL when connecting to the server. Need to read the PostgreSQL manual for details. Maybe that’s all that you need.

2) Maybe need to add certificates to the JVM so that it can connect to the PostgreSQL server. Something like 
$JAVA_HOME/bin/keytool -import -keystore $JAVA_HOME/jre/lib/security/cacerts -alias MySQLCert -file my_sql_cert.pem.

3) Maybe the plain postgresql*jdbc.jar that we include in CSS is not sufficient for connecting via SSL. In that case, the additional jar files will need to be identified and added.

-Kay

> On Jun 1, 2016, at 5:43 AM, Zumbruch, Peter Dr. <[email protected]> wrote:
> 
> Hi,
> I am using the CSS based RDB Channel Archiver and the PostgreSQL database – not under my control  - requires SSL on, at least the mode “required”.
> When running the ArchiveConfigTool (3.2.15) how/where can I modify it to be “SSL-aware”?
>  
> Otherwise I get this error message:
> $ ArchiveConfigTool -pluginCustomization settings_hades_scs_css_archive.ini -import -engine HadesArchiveEngine -config hadesArchive_css.xml -descriptionHADES_Archiver -replace_engine
> Importing     : hadesArchive_css.xml
> Engine        : HadesArchiveEngine
> Description   : HADES_Archiver
> URL           : http://localhost:4812/main
> Replace engine: true
> Steal channels: false
> 2016-06-01 11:39:57.677 SEVERE [Thread 1] org.csstudio.archive.config.rdb.ArchiveConfigApplication (start) - Exception
> org.postgresql.util.PSQLException: FATAL: client authentication failed
>   Detail: no pool_hba.conf entry for host "140.181.75.165", user "hades_scs_css_archive", database "hades_scs_css_archive", SSL off
>   Hint: see pgpool log for details
>         at org.postgresql.core.v3.ConnectionFactoryImpl.doAuthentication(ConnectionFactoryImpl.java:408)
>         at org.postgresql.core.v3.ConnectionFactoryImpl.openConnectionImpl(ConnectionFactoryImpl.java:181)
>         at org.postgresql.core.ConnectionFactory.openConnection(ConnectionFactory.java:64)
>         at org.postgresql.jdbc2.AbstractJdbc2Connection.<init>(AbstractJdbc2Connection.java:144)
>         at org.postgresql.jdbc3.AbstractJdbc3Connection.<init>(AbstractJdbc3Connection.java:29)
>         at org.postgresql.jdbc3g.AbstractJdbc3gConnection.<init>(AbstractJdbc3gConnection.java:21)
>         at org.postgresql.jdbc4.AbstractJdbc4Connection.<init>(AbstractJdbc4Connection.java:31)
>         at org.postgresql.jdbc4.Jdbc4Connection.<init>(Jdbc4Connection.java:24)
>         at org.postgresql.Driver.makeConnection(Driver.java:410)
>         at org.postgresql.Driver.connect(Driver.java:280)
>         at java.sql.DriverManager.getConnection(DriverManager.java:664)
>         at java.sql.DriverManager.getConnection(DriverManager.java:247)
>         at org.csstudio.platform.utility.rdb.internal.PostgreSQL_RDB.connect(PostgreSQL_RDB.java:44)
>         at org.csstudio.platform.utility.rdb.RDBUtil.<init>(RDBUtil.java:179)
>         at org.csstudio.platform.utility.rdb.RDBUtil.connect(RDBUtil.java:143)
>         at org.csstudio.archive.config.rdb.RDBArchiveConfig.<init>(RDBArchiveConfig.java:80)
>         at org.csstudio.archive.config.rdb.XMLImport.<init>(XMLImport.java:123)
>         at org.csstudio.archive.config.rdb.ArchiveConfigApplication.start(ArchiveConfigApplication.java:207)
>         at org.eclipse.equinox.internal.app.EclipseAppHandle.run(EclipseAppHandle.java:196)
>         at org.eclipse.core.runtime.internal.adaptor.EclipseAppLauncher.runApplication(EclipseAppLauncher.java:134)
>         at org.eclipse.core.runtime.internal.adaptor.EclipseAppLauncher.start(EclipseAppLauncher.java:104)
>         at org.eclipse.core.runtime.adaptor.EclipseStarter.run(EclipseStarter.java:380)
>         at org.eclipse.core.runtime.adaptor.EclipseStarter.run(EclipseStarter.java:235)
>         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>         at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
>         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>         at java.lang.reflect.Method.invoke(Method.java:497)
>         at org.eclipse.equinox.launcher.Main.invokeFramework(Main.java:648)
>         at org.eclipse.equinox.launcher.Main.basicRun(Main.java:603)
>         at org.eclipse.equinox.launcher.Main.run(Main.java:1465)
>         at org.eclipse.equinox.launcher.Main.main(Main.java:1438)
>  
> Any help appreciated,
> With best regards,
> Peter
>  
> -- 
> Dr. Peter Zumbruch
> Experiment Electronics / Controls group 
> 
> Phone / Telefon: +49-6159-71-1435 
> Fax: +49-6159-71-2986 
> E-Mail: [email protected]
> 
> GSI Helmholtzzentrum für Schwerionenforschung GmbH
> Planckstraße 1, 64291 Darmstadt, Germany, www.gsi.de
> 
> Commercial Register / Handelsregister: Amtsgericht Darmstadt, HRB 1528
> Managing Directors / Geschäftsführung:
> Ursula Weyrich, Professor Dr. Karlheinz Langanke, Jörg Blaurock
> Chairman of the Supervisory Board / Vorsitzender des GSI-Aufsichtsrats:
> State Secretary / Staatssekretär Dr. Georg Schütte

Experimental Physics and Industrial Control System

Experimental Physics and
Industrial Control System