Configuring TIBCO ActiveMatrix BusinessWorks™ 5 to connect to PostgreSQL database server over TLS

This article explains how to configure JDBC Connection shared resource in TIBCO ActiveMatrix BusinessWorks™ 5 to connect to PostgreSQL database server over TLS 

Prerequisite

The JDBC driver JAR file (PostgreSQL JDBC Driver - postgresql-x.x.x.jar) must be available in bwengine classpath.

JDBC Driver

Select org.postgresql.Driver from the Select driver dropdown.

Database URL

To enable TLS with mutual authentication, specify the URL as follows -

jdbc:postgresql://host:port/database?ssl=true&sslmode=verify-ca&sslrootcert=path_to_server_cert_file&sslkey=path_to_client_key_file&sslpassword=password&sslcert=path_to_client_cert_file

For example,

jdbc:postgresql://dbserver:5432/postgres?ssl=true&sslmode=verify-ca&sslrootcert=D:/wa/PKI/server.crt&sslkey=D:/wa/PKI/client.pk8&sslpassword=password&sslcert=D:/wa/PKI/client.crt

ssl - Set this property to true to enable TLS
sslmode - Set this property to verify-ca to validate server certificate
sslrootcert - Path to the DB server certificate file
sslkey - Path to the client key file
sslpassword - Client key password
sslcert - Path to the client certificate file

References

https://jdbc.postgresql.org/documentation/ssl/