从 Digital Ocean 下载的 .crt CA 证书文件放在哪里，用于连接到其托管 PostgreSQL 服务器的 SSL

Question

In a simple HelloWorld app using JDBC to make a connection to the Managed PostgreSQL servers by Digital Ocean, where does one place the downloaded ca-certificate.crt file downloaded from their "Getting Started" page?

I assume the JDBC driver needs access to the certificate to make an encrypted SSL (TLS) connection to the database server. But how do I make the certificate available to the JDBC driver during development and at deployment?

Answer 1

You have different "factories" to choose from. If you use LibPQFactory (which may or may not be the default, depending on what sentence of the docs you trust), then you put the cert in the same place as you put it for libpq, ie for psql, which varies by your OS. If you use a different factory, then you need to jump through keytool's hoops, as described in the docs .