PostgreSQL Connector

Back Next

Configure SSL with serverless runtime environment

You can use the serverless runtime environment with PostgreSQL Connector to connect to an SSL-enabled PostgreSQL database.

Before you configure a secure PostgreSQL connection using the serverless runtime environment, complete the following prerequisite tasks to add the SSL certificates to the serverless runtime location:

Create the following structure for the serverless agent configuration in AWS or Azure:

<Supplementary file location>/serverless_agent_config

Add the truststore and keystore certificates in the Amazon S3 bucket or Azure container in the following location in your AWS or Azure account:

<Supplementary file location>/serverless_agent_config/SSL

Copy the following code snippet to a text editor:

version: 1
agent:
  agentAutoApply:
    general:
      sslStore:
        - fileCopy:
            sourcePath: SSL/<TrustStore_filename>
        - fileCopy:            
            sourcePath: SSL/<KeyStore_filename>

where the sourcePath is the directory path of the certificate files in AWS or Azure.

Ensure that the syntax and indentations are valid, and then save the file as

serverlessUserAgentConfig.yml

in the following AWS or Azure location:

<Supplementary file location>/serverless_agent_config

When the .yml file runs, the SSL certificates are copied from the AWS or Azure location to the serverless agent directory.

In the PostgreSQL connection properties, specify the following certificate path in the serverless agent directory in the

Trust Store

and

Key Store

fields:

/home/cldagnt/SystemAgent/serverless/configurations/ssl_store/<cert_filename>