Skip to content

Commit 0d5eecc

Browse files
authored
sslNegotiation is needed to pickup SpiffeSslSocketFactory (#325)
* sslNegotiation is needed to pickup SpiffeSslSocketFactory Signed-off-by: Peter <peter.gassner@outlook.com>
1 parent db84782 commit 0d5eecc

1 file changed

Lines changed: 3 additions & 2 deletions

File tree

java-spiffe-provider/README.md

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -147,11 +147,12 @@ from a SPIRE Agent, keep them updated in memory, and provide them for TLS connec
147147
The URL to connect to Postgres using TLS and Java SPIFFE is as follows:
148148

149149
```
150-
jdbc:postgresql://localhost:5432/postgres?sslmode=require&sslfactory=io.spiffe.provider.SpiffeSslSocketFactory
150+
jdbc:postgresql://localhost:5432/postgres?sslmode=require&sslfactory=io.spiffe.provider.SpiffeSslSocketFactory&sslNegotiation=direct
151151
```
152152

153153
The parameter `sslfactory` in the URL configures the Postgres JDBC driver to use the `SpiffeSslSocketFactory` which wraps
154-
around an SSL Socket with the Java SPIFFE functionality.
154+
around an SSL Socket with the Java SPIFFE functionality. Additional parameter `sslNegotiation` is needed to instantiate
155+
`SpiffeSslSocketFactory` correct.
155156

156157
The Workload API socket endpoint should be configured through the Environment variable `SPIFFE_ENDPOINT_SOCKET`.
157158

0 commit comments

Comments
 (0)