The Ultimate Guide to High Availability with MariaDB
This is a read-only copy of the MariaDB Knowledgebase generated on 2024-11-16. For the latest, interactive version please visit https://mariadb.com/kb/.

Maria 2-Way SSL Authentication with java

Tried to connect java with MariaDB 2-Way SSL Authentication.

I created CA, Server and client certificate using below mentioned link: https://mariadb.com/docs/server/security/data-in-transit-encryption/create-self-signed-certificates-keys-openssl/

Used this below steps to format the client certificate: Followed this document: https://mariadb.com/kb/en/using-tls-ssl-with-mariadb-java-connector/

Convert client cert to PkCS12 format:

Command: openssl pkcs12 -export -in client-cert.pem -inkey client-key.pem -out keystore.PKSC12 -name "mariadbAlias" -passout pass:mypassword

Convert PKCS12 file to keystore:

Command: keytool -importkeystore -deststorepass mypassword -destkeypass mypassword -destkeystore Keystore -srckeystore keystore.PKSC12 -srcstoretype PKCS12 -srcstorepass mypassword -alias "mariadbAlias"

MariaDB driver version: 3.4.1

Case 1:

Java connection string: jdbc:mariadb:localhost:3307/mysql?user=user&password=pwd&sslMode=VERIFY_CA&serverSslCert=C:
ca-cert.pem&keyStore=C: keystore&keyStorePassword=mypassword

Case 2: Also tried to import ca-cert.pem file to JRE\lib\security\cacerts file. Used this below url for this case: jdbc:mariadb:localhost:3307/mysql?user=user&password=pwd&sslMode=VERIFY_CA&keyStore=C: keystore&keyStorePassword=mypassword

Exception occurred in both the case: Caused by: javax.net.ssl.SSLException: readHandshakeRecord Suppressed: java.net.SocketException: An established connection was aborted by the software in your host machine

How to create CA, server, client certificate in MariaDB. And how to convert client certificate to keystore. What is the extract connection string to connect with Java?

Can please provide solution for this issue?

Content reproduced on this site is the property of its respective owners, and this content is not reviewed in advance by MariaDB. The views, information and opinions expressed by this content do not necessarily represent those of MariaDB or any other party.