disable hostname validation with new DB2 driver

DecisionsDev · Jan 9, 2025 · e40ac0c · e40ac0c
1 parent 1ef2a67
commit e40ac0c
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/common/script/updateDatasource.sh b/common/script/updateDatasource.sh
@@ -122,15 +122,15 @@ then
                 if [ -n "$DB_SSL_TRUSTSTORE_PASSWORD" ]
 		then
 			echo "configure DB2 SSL with DB_SSL_TRUSTSTORE_PASSWORD"
-			sed -i 's|sslConnection="false"|sslConnection="true" sslVersion="TLSv1.3" sslTrustStoreLocation="/config/customdatasource/truststore.p12" sslTrustStorePassword="'$DB_SSL_TRUSTSTORE_PASSWORD'"|g' /config/datasource.xml
+			sed -i 's|sslConnection="false"|sslConnection="true" sslClientHostnameValidation="OFF" sslVersion="TLSv1.3" sslTrustStoreLocation="/config/customdatasource/truststore.p12" sslTrustStorePassword="'$DB_SSL_TRUSTSTORE_PASSWORD'"|g' /config/datasource.xml
 		else
 			echo "configure DB2 SSL with DEFAULT_TRUSTSTORE_PASSWORD"
 			DEFAULT_TRUSTSTORE_PASSWORD=changeme
 			if [ -f "/shared/tls/truststore/jks/trusts.jks" ]
 			then
 				DEFAULT_TRUSTSTORE_PASSWORD=changeit
 			fi
-			sed -i 's|sslConnection="false"|sslConnection="true" sslVersion="TLSv1.3" sslTrustStoreLocation="/config/security/truststore.p12" sslTrustStorePassword="'$DEFAULT_TRUSTSTORE_PASSWORD'"|g' /config/datasource.xml
+			sed -i 's|sslConnection="false"|sslConnection="true" sslClientHostnameValidation="OFF" sslVersion="TLSv1.3" sslTrustStoreLocation="/config/security/truststore.p12" sslTrustStorePassword="'$DEFAULT_TRUSTSTORE_PASSWORD'"|g' /config/datasource.xml
                         if [ -f /config/customdatasource/tls.crt ]
                         then
                                 echo "Import DB2 certificate"