The Foglight FMS installer does not support connecting to PostgreSQL with SSL.
How can a FMS repository be installed using PostgreSQL with a forced SSL connection?
Is this configuration supported?
When installing Foglight using an external PostgreSQL repository database with forced SSL connections, the installation fails and it is not possible to connect. The installer does not prompt for SSL details.
Error - Failed to Connect as foglight repository administrator:
org.postgresql.util.PSQLException: FATAL: no pg_hba.conf entry for host
"host", user "user", database "foglight", SSL off
There are multiple methods to configure a Foglight FMS installation to use a PostgreSQL database repository with force SSL enabled.
WORKAROUND 1 - Preferred
Use the silent installer. The silent installer properties file supports an “FMS_DB_CONNECTION_URL” property allow the JDBC URL to be provided.
Run the silent installer against a PostgreSQL database with forced SSL and self-signed certificates using the following property value (where localhost is the FMS repository server hostname)
FMS_DB_CONNECTION_URL=jdbc:postgresql://localhost:5432/fogssl?ssl=true&sslfactory=org.postgresql.ssl.NonValidatingFactory
WORKAROUND 2
Note: Using the command line installer option (-i console) allows for the installation to be completed without having to cancel it; then it is possible to manually apply the required configuration changes for SSL connection (steps 6-8).
WORKAROUND 3
Refer to KB 281210 - How to set up Foglight to connect to a PostgreSQL backend repository via SSL with client certificate Authentication
STATUS
Enhancement ID FOG-3006 has been logged to include an option for SSL support to PostgreSQL repository in a future release of the Foglight FMS installer.
© ALL RIGHTS RESERVED. Feedback Términos de uso Privacidad Cookie Preference Center