LuckPerms

LuckPerms

Mods
41.4k Downloads

useSSL doesn't work with Postgresql

hornta opened this issue · 8 comments

commented

And because I can only connect to my postgresdatabase with ssl, there is currently no way for me to use postgres.
Either make useSSL work with Postgres or give me the ability to use my own connectionstring(instead of building the connection string in luckperms)

commented

It would be much better if you would provide actual information why useSSL doesn't work.

  • What are the errors?
  • Are there even any?
  • What did you try?
  • Did you check the wiki for any ideas/options?

If you can answer those questions and perhaps provide more information maybe then we will be able to assist you.

commented

I both have a similar problem. In the console I got this:
[luckperms-hikari connection adder/WARN]: Wed May 15 11:26:48 CEST 2019 WARN: Establishing SSL connection without server's identity verification is not recommended. According to MySQL 5.5.45+, 5.6.26+ and 5.7.6+ requirements SSL connection must be established by default if explicit option isn't set. For compliance with existing applications not using SSL the verifyServerCertificate property is set to 'false'. You need either to explicitly disable SSL by setting useSSL=false, or set useSSL=true and provide truststore for server certificate verification.

I'm using a MySQL connection

commented

Error is on the storage system errors page here.

commented

Oh, I didn't see that. Thank you

commented

@lucko I tries the useSSL option but it doesn’t work with postgres

commented

I'm not familiar with how SSL works with PostgreSQL.

However, the options specified in that config section are just what LP passes on to the database connection pool.

If the option isn't working, then it's an issue with the PostgreSQL driver or your SQL server.

commented

For anyone else stumbling upon this, I found that the following allows luck perms to connect to a database with a pg_hba config only allowing ssl:

data:
...
  pool-settings:
  ...
    properties:
      sslMode: require