Skip to content

Resolve "upgrade frost postgres connections to verify-full"

Closes #116 (closed)

Why?

verify-full is currently not working for frost postgresql connections.

by copying the ca-certificates.crt into /home/tomcat/.postgresql/root.crt, tomcat can find the certificate without needing to define the sslrootcert path in the postgresql connection URL

How to test?

  • connect to VPN
  • fire docker compose up locally
  • copy the contents of a tomcat context file from stage (data/tomcat/context/...)
  • include sslmode=verify-full in the postgresql url (<Resource ... url=...?sslmode=verify-full)
  • wait for frost server to start up (url depends on the name of the context file)
  • select e.g. Things to check whether a db connection can be established
    • an empty array shows that the database connection works. if it doesn't, then frost will return an error value

If this MR is merged we can upgrade the frost connections in the context files created by the dispatcher to verify-full.

Edited by Joost Hemmen

Merge request reports