GUACAMOLE-728: Only set legacy flag when SSL is disabled.

This commit is contained in:
Virtually Nick
2020-06-25 22:19:57 -04:00
parent e3e62f5860
commit 82168e1d77

View File

@@ -85,12 +85,13 @@ public class PostgreSQLAuthenticationProviderModule implements Module {
if (sslMode != PostgreSQLSSLMode.PREFER)
driverProperties.setProperty("sslmode", sslMode.getDriverValue());
// If SSL is requested disabled, also set the legacy property.
if (sslMode == PostgreSQLSSLMode.DISABLE)
driverProperties.setProperty("ssl", "false");
// If SSL is enabled, check for and set other SSL properties.
if (sslMode != PostgreSQLSSLMode.DISABLE) {
else {
// Sets the legacy SSL configuration mode required by older servers.
driverProperties.setProperty("ssl", "true");
File sslClientCert = environment.getPostgreSQLSSLClientCertFile();
if (sslClientCert != null)
driverProperties.setProperty("sslcert", sslClientCert.getAbsolutePath());