Re: SSL Problem

On Thu, 15 Jul 2004, Stefano Bonnin wrote:

> 2004-07-15 14:03:40 LOG:  could not load root certificate file
> "/usr/local/pgsql-7.4.2/bin/../../pgsql-7.4.1/data/root.crt": No such file
> or directory
> DETAIL:  Will not verify client certificates.

This is fine.  You do not need a root.crt file.   This is used to
authenticate clients to the server which is optional and not necessary to
establish a SSL connection.

Again the problem seems to be that you have not made the server cert
available to the connecting jvm.  Adding -Djavax.net.debug=ssl to your
java command will produce a lot of debug information, but will likely
confirm this.  The key line will be in the first part of the output where
it displays which trustStore you are using.  The server cert must be in
this file.

Kris Jurka