Do not input private or sensitive data. View Qlik Privacy & Cookie Policy.
Skip to main content

Announcements
See why IDC MarketScape names Qlik a 2025 Leader! Read more
cancel
Showing results for 
Search instead for 
Did you mean: 
rmartin2
Creator II
Creator II

Access Google Cloud SQL Database with SSL

Hi !

 

I've pretty much tried everything at this point, so I'm asking if someone solved this one !

 

TL;DR : 

I can't even connect my Talend Job to a database (in this case, PostgreSQL) managed by Google Cloud Platform, in the case it's protected by SSL certificate. I need to remove this protection to access the database.

 

Full subject :

 

We have several Databases managed by GCP. A certificate is defined for each of them (pkcs5 certs if I remember well on GC SQL).

But, because there's always one, we discovered that's they didn't activated the "force SSL login" option (for our defense it's not really obvious when browsing all pages). So we realized that the fact we were able to connect to the Database is purely due to the lack of security (real security, not login/pwd).

 

As we tried to activate this feature, we lost all contact to the databases immediately. We tried first the basic files, which weren't supported.

We tried converting it to .pem and .crt files with OpenSSL so it could be read by Talend. No results.

 

It seems that Talend manage to engage a bit of handshake, but is not able to make the full process.

 

 

So, here we are, using either Postgres or JDBC component (doesn't matter), and only being able to connect without SSL, which is quite hazardous.

The target is a PostgreSQL database managed by Google Cloud (not hosted on a machine, just managed), protected by a SSL certificate.

We are using the latest version of the studio, and older versions we have doesn't work either.

There's really nothing to paste/share more IMO.

 

As far as I know, Talend only handle JKS stores, which may be the explanation... But I'm kinda stuck on it for a while now.

And SSL errors shown are quite generic, making debug impossible...

 

 

Thank you in advance for your input, and if you are a genius, directly an operating mode 0683p000009MACJ.png (but I'm dreaming)

 

Sincerely,

 

 

Labels (2)
1 Reply
rmartin2
Creator II
Creator II
Author

Hi,

Any input on this one ?
I think I'm not the only one using Google Cloud managed Databases ...

Are you all exposing the database without certificates ?