Configuring TIBCO ActiveMatrix BusinessWorks™ 5 to connect to MariaDB database server over TLS

This article explains how to configure JDBC Connection shared resource in TIBCO ActiveMatrix BusinessWorks™ 5 to connect to MariaDB database server over TLS.

Prerequisite

The JDBC driver JAR file (MariaDB Connector/J - mariadb-java-client-x.x.x.jar) must be available in bwengine classpath.

JDBC Driver

Do not select a driver from the Select driver dropdown. In the JDBC Driver field, type in org.mariadb.jdbc.Driver

Database URL

To enable TLS with mutual authentication, specify the URL as follows -

jdbc:mariadb://host:port/database?useSSL=true&trustStore=path_to_truststore_file&trustStorePassword=truststore_password&keyStore=path_to_keystore_file&keyStorePassword=keystore_password

For example,
jdbc:mariadb://dbserver:3306/bwdb?useSSL=true&trustStore=D:/PKI/trust.jks&trustStorePassword=password&keyStore=D:/PKI/key.jks&keyStorePassword=password

• useSSL - Set this property to true to enable TLS
• trustStore - Full path to the trust store containing the DB server certificate 
• trustStorePassword - Trust store password
• keyStore - Full path to the keystore containing the client certificate and private key
• keyStorePassword - Keystore password

Using system properties to specify the trust store and keystore files

The trust store and keystore can be specified using the system properties javax.net.ssl.trustStore and javax.net.ssl.keyStore respectively. When using these system properties, specify the URL as follows -

jdbc:mariadb://host:port/database?useSSL=true

Add the following properties to designer.tra/bwengine.tra -

javax.net.ssl.trustStore=path_to_truststore_file
javax.net.ssl.trustStorePassword=truststore_password
javax.net.ssl.keyStore=path_to_keystore_file
javax.net.ssl.keyStorePassword=keystore_password

References -

https://mariadb.com/kb/en/using-tls-ssl-with-mariadb-java-connector/