Setting SSLContext to jdbc connection

Question

I want to create and configure SSLContext object and then make mysql.jdbc.Driver use it for establishing secure connection. Is there an approach for it better then custom jdbc.Driver?

Bruno · Accepted Answer · 2013-02-22 10:25:05Z

2

You can create a custom com.mysql.jdbc.SocketFactory class that creates SSLSockets using an SSLSocketFactory coming from this SSLContext. Then, you can pass that class name to the MySQL JDBC connector using the socketFactory property (see table in the documentation).

This needs to have a constructor with no parameters, but its Socket connect(String host, Properties props) method should get the JDBC properties via its props parameter (if you need).

Note that you should not only check the validity of your certificate, but also check that the host name matches. If you're using Java 7, this can be done like this before returning the SSLSocket you've just created:

SSLParameters sslParams = new SSLParameters();
sslParams.setEndpointIdentificationAlgorithm("HTTPS");
sslSocket.setSSLParameters(sslParams);

(The host name matching rules for HTTPS should be sufficiently sensible for most protocols, including MySQL.)

answered Feb 22, 2013 at 10:25

Bruno

123k33 gold badges279 silver badges389 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Adrien Over a year ago

It seems it would replace the StandardSocketFactory[1], so you would lose all features relating to timeouts, keepalive and buffersize, wouldn't you? [1]docjar.com/html/api/com/mysql/jdbc/…

Collectives™ on Stack Overflow

Setting SSLContext to jdbc connection

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related