Problems connecting Pentaho Kettle/Spoon to Heroku PostgreSQL using SSL

Question

I\'m trying to connect spoon to a Heroku PostgreSQL instance using the JDBC driver that came with Spoon. Heroku requires SSL for it\'s stand alone PostgreSQL instances, whic

Answer 1

I found the issue. Simply passing

ssl = true

isn't enough for JDBC, you also need to install the correct root certificates in your Java keystore so that PgJDBC can verify the remote certificate.

If you don't want to configure the root certificate store you may instead pass:

ssl = true
sslfactory = org.postgresql.ssl.NonValidatingFactory

though doing so disables man-in-the-middle attack protection, so your SSL session no longer has reliable end-to-end security.

See the Heroku docs here:

http://devcenter.heroku.com/articles/connecting-to-relational-databases-on-heroku-with-java#connecting_to_a_dedicated_database_remotely

(Warning about SSL security added by Craig Ringer)