Edit pg_hba.conf
Just use 0.0.0.0/0
host all all 0.0.0.0/0 md5
Make sure the listen_addresses in postgresql.conf (or ALTER SYSTEM SET) allows incoming connections on all available IP interfaces.
listen_addresses = '*'
After the changes you have to reload the configuration. One way to do this is execute this SELECT as a superuser.
SELECT pg_reload_conf();
** Note: to change listen_addresses, a reload is not enough, and you have to restart the server.
Reference :
<dependency>
<groupId>com.jcraft</groupId>
<artifactId>jsch</artifactId>
<version>0.1.53</version>
</dependency>
import java.io.InputStream;
import com.jcraft.jsch.Channel;
import com.jcraft.jsch.ChannelExec;
import com.jcraft.jsch.JSch;
import com.jcraft.jsch.Session;
public class JSchExampleSSHConnection {
/**
* JSch Example Tutorial
* Java SSH Connection Program
*/
public static void main(String[] args) {
String host="ssh.journaldev.com";
String user="sshuser";
String password="sshpwd";
String command1="ls -ltr";
try{
java.util.Properties config = new java.util.Properties();
config.put("StrictHostKeyChecking", "no");
JSch jsch = new JSch();
Session session=jsch.getSession(user, host, 22);
session.setPassword(password);
session.setConfig(config);
session.connect();
System.out.println("Connected");
Channel channel=session.openChannel("exec");
((ChannelExec)channel).setCommand(command1);
channel.setInputStream(null);
((ChannelExec)channel).setErrStream(System.err);
InputStream in=channel.getInputStream();
channel.connect();
byte[] tmp=new byte[1024];
while(true){
while(in.available()>0){
int i=in.read(tmp, 0, 1024);
if(i<0)break;
System.out.print(new String(tmp, 0, i));
}
if(channel.isClosed()){
System.out.println("exit-status: "+channel.getExitStatus());
break;
}
try{Thread.sleep(1000);}catch(Exception ee){}
}
channel.disconnect();
session.disconnect();
System.out.println("DONE");
}catch(Exception e){
e.printStackTrace();
}
}
}
<!DOCTYPE html>
<html lang="en">
<head>
<title>Mixed Content</title>
</head>
<body>
<script src="http://code.jquery.com/jquery-3.3.1.slim.min.js"></script>
</body>
</html>
Mixed Content: The page at 'https://localhost:8443/index.html' was loaded over HTTPS, but requested an
insecure script 'http://code.jquery.com/jquery-3.3.1.slim.min.js'. This request has been blocked;
the content must be served over HTTPS.
localhost or 127.0.0.1. You could create self signed certificates, but browsers show you some ugly warning messages and it's not very convenient.openssl or the keytool from Java.mkcert-install command. This creates a private CA, configures the operating system and browsers to trust this CA. It also automatically adds the CA to Java if it finds a JAVA_HOME environment variable.mkcert-v1.4.0-windows-amd64.exe -install
rootCA.pem and rootCA-key.pem in your home directory (C:\Users\<USER>\AppData\Local\mkcert). It registers the CA in the Windows system certification store. Browsers like Chrome and Firefox read root certificates from this store.certmgr.msc
localhost, 127.0.0.1 and ::1, that is signed by our own private CA. By default, mkcert creates certificates in the PEM format. Because we want to use the certificate in a Java application (Spring Boot) and Java can't load PEM certificates, we have to create the certificate in the PKCS#12 format.mkcert-v1.4.0-windows-amd64.exe -pkcs12 localhost 127.0.0.1 ::1
localhost+2.p12 in the current directory. The PKCS#12 bundle is secured with the password changeit.curl method. Run the following command in your command prompt:curl https://start.spring.io/starter.zip -d dependencies=web,thymeleaf -d javaVersion=11 -d groupId=ch.rasc -d artifactId=h2demo -o h2demo.zip
h2demo.zip file and copy the certificate localhost+2.p12 into the root folder of your project.src/main/resources/application.properties, it's empty by default, and insert the following content:server.http2.enabled=true
server.port=8443
server.ssl.enabled=true
server.ssl.key-store=./localhost+2.p12
server.ssl.key-store-type=PKCS12
server.ssl.key-store-password=changeit
@SpringBootApplication
@RestController
public class Application {
public static void main(String[] args) {
SpringApplication.run(Application.class, args);
}
@GetMapping("/")
public String helloWorld() {
return "Hello World";
}
}
.\mvnw.cmd spring-boot:run
mkcert creates the root certificate in the PEM format, which Charles can't read. We therefore have to convert the file into a PKCS#12 file.mkcert has stored the root certificate, run the following command. It tells you the directory containing the root certificate.mkcert-v1.4.0-windows-amd64.exe -CAROOT
openssl pkcs12 -export -out rootCA.pkcs12 -inkey rootCA-key.pem -in rootCA.pem
changeit and openssl creates a new file rootCA.pkcs12 from the PEM file.
<img>, <link>, <script> and others<img> tag. We, as the developer of the page, know when a browser requests this HTML page he also needs the image, so why not send it together with the HTML page and that is what HTTP/2 push provides.<!DOCTYPE html>
<html lang="en">
<head>
<title>HTTP2 Push Test</title>
</head>
<body>
<img src="cat.webp">
</body>
</html>
cat.webp<img> tag and looks for it in the push cache (a special cache for resources that have been pushed from the server). Because he finds the image in there he immediately displays the page without sending any further requests. @GetMapping("/withoutPush")
public String withoutPush() {
return "index";
}
@GetMapping("/withPush")
public String withPush(PushBuilder pushBuilder) {
if (pushBuilder != null) {
pushBuilder.path("cat.webp").push();
}
return "index";
}
index references the HTML page, mentioned above, that is stored in the src/main/resources/template folder. javax.servlet.http.PushBuilder is a class from the Servlet 4 implementation and allows us to specify which resources we want to push in addition to the HTML page./withoutPush with an empty browser cache, we see the typical waterfall of requests. The browser receives the HTML, parses it and requests the image.
mkcert tool. With a valid TLS certificate, setting up TLS on Spring Boot and Java 11 is also very easy, because it provides everything out of the box for running a TLS and HTTP/2 server.
