How can I configure Hibernate to use SSL to talk to the DB server?

Question

I have an existing java webapp that uses Hibernate for it's persistence. I've been told that I have to have to talk to the DB encrypted - so my first thought is to set it up to do the communication via SSL - and went through figured out how to set up Oracle to listen for JDBC over SSL -

http://www.oracle.com/technology/tech/java/sqlj_jdbc/pdf/wp-oracle-jdbc_thin_ssl_2007.pdf

And wrote a quick test class to verify that it was setup and working (connecting via standard JDBC). That left me with the issue of configuring Hibernate - unfortunately I don't see how hibernate supports it?

That link is dead, and I believe this is the updated version: oracle.com/technetwork/topics/… — Jordan
– Jordan, Commented Nov 10, 2015 at 22:39

andri · Accepted Answer · 2009-08-13 18:17:13Z

5

Hibernate works with standard JDBC data sources, so there is no need for Hibernate-specific configuration.

Here's an quick example that should work when configuring Hibernate with Spring:

<bean id="dataSource" class="oracle.jdbc.pool.OracleDataSource">
    <property name="URL"><value><!-- JDBC URL that specifies SSL connection --></value></property>
    <!-- other relevant properties, like user and password -->
    <property name="connectionProperties>
        <value>
            oracle.net.ssl_cipher_suites: (ssl_rsa_export_with_rc4_40_md5, ssl_rsa_export_with_des40_cbc_sha)
            oracle.net.ssl_client_authentication: false
            oracle.net.ssl_version: 3.0
            oracle.net.encryption_client: REJECTED 
            oracle.net.crypto_checksum_client: REJECTED
        </value>
    </property>
</bean>

<bean id="sessionFactory" class="org.springframework.orm.hibernate3.annotation.AnnotationSessionFactoryBean">
    <property name="dataSource" ref="dataSource" />
    <!-- classes etc -->
</bean>

edited Aug 13, 2009 at 18:17

answered Aug 13, 2009 at 17:33

andri

11.3k2 gold badges40 silver badges49 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

BZ. Over a year ago

However I have to set some properties on the driver - using JDBC I can just do this : prop .setProperty("oracle.net.ssl_cipher_suites", "(ssl_rsa_export_with_rc4_40_md5, ssl_rsa_export_with_des40_cbc_sha)"); prop.setProperty("oracle.net.ssl_client_authentication", "false"); prop.setProperty("oracle.net.ssl_version", "3.0"); prop.setProperty("oracle.net.encryption_client", "REJECTED"); prop.setProperty("oracle.net.crypto_checksum_client", "REJECTED"); However how can I get thos properties associated with the driver through hibernate?

andri Over a year ago

That depends how you are configuring Hibernate. I'll add an example that you can use with Spring in a moment.

andri Over a year ago

If you are not using Spring, see Table 3.4 of the Hibernate docs: docs.jboss.org/hibernate/stable/core/reference/en/html/… - although I haven't tested it, it seems that you can pass JDBC properties to Hibernate just by adding hibernate.connection.* properties.

Ramson Tutte · Accepted Answer · 2010-10-12 19:01:09Z

4

Try this:

    <property name="hibernate.dialect">org.hibernate.dialect.MySQLInnoDBDialect</property>
    <property name="hibernate.connection.driver_class">com.mysql.jdbc.Driver</property>
    <property name="hibernate.connection.url">jdbc:mysql://blablaba:8443/dbname?useSSL=true</property>
    <property name="hibernate.connection.verifyServerCertificate">false</property>
    <property name="hibernate.connection.requireSSL">true</property>
    <property name="hibernate.connection.autoReconnect">true</property>
    <property name="hibernate.connection.username">bablablab</property>
    <property name="hibernate.connection.password">clclclclc</property>

1 Comment

Ala Eddine Menai Over a year ago

I tried your configuration but it does not give me any effect .

Jayanta Debnath · Accepted Answer · 2017-09-19 21:18:39Z

2

Please add following property in Hibernate configuration file to enable SSL :

<property name="hibernate.connection.verifyServerCertificate">false</property> <property name="hibernate.connection.useSSL">true</property>

answered Sep 19, 2017 at 21:18

Jayanta Debnath

4812 bronze badges

2 Comments

pucky124 Over a year ago

Is there anything new in this answer that the other answers haven't already said?

Jayanta Debnath Over a year ago

The others answer used: <property name="hibernate.connection.requireSSL">true</property> But for my case it didn't worked. I have to use following to get it work : <property name="hibernate.connection.useSSL">true</property>

Gren · Accepted Answer · 2009-08-13 17:38:22Z

1

Should be handled by the driver but you may have to do some configuration. Oracle Docs

answered Aug 13, 2009 at 17:38

Gren

5732 silver badges9 bronze badges

Comments

Swati Srivastava · Accepted Answer · 2022-03-01 13:38:07Z

0

I had the jdbcURL jdbc:postgresql://jdbcurl?sslmode=require&sslrootcert=location_to_cert1&sslcert=location_to_cert2&sslkey=location_to_cert3.

All I had to do was to replace all the & with &.

My new jdbcURL looks like jdbc:postgresql://jdbcurl?sslmode=require&sslrootcert=location_to_cert1&sslcert=location_to_cert2&sslkey=location_to_cert3

answered Mar 1, 2022 at 13:38

Swati Srivastava

1,2071 gold badge14 silver badges20 bronze badges

Collectives™ on Stack Overflow

How can I configure Hibernate to use SSL to talk to the DB server?

5 Answers 5

3 Comments

1 Comment

2 Comments

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

5 Answers 5

3 Comments

1 Comment

2 Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related