Configure SSH and SSL
Open data source properties. You can open data source properties by using one of the following options:
Navigate to .
Press CtrlAltShift0S.
In the Database Explorer ( ), click the Data Source Properties icon (
).
On the Data Sources tab, select a data source that you want to modify.
Click the SSH/SSL tab and select the Use SSL checkbox.
In the CA file field, navigate to the CA certificate file (for example, mssql.pem).
You can leave the certificate file fields empty and use a truststore to obtain a required certificate from the certificates that it contains. To do that, tick the Use truststore checkbox and select the truststore that you want to use.
IDE: Use the certificates that are accepted by the IDE. You can add new accepted certificates in .
JAVA: Use JAVA truststore certificates.
System: Use System truststore certificates.
In the Client certificate file field, navigate to the client certificate file (for example, client-cert.pem).
In the Client key file field, navigate to the client key file (for example, client-key.pem).
From the Mode list, select the verification mode:
Require
Verifies that the server recognizes the client certificate, if the certificate is provided.
Verify CA
Verifies that the server recognizes the client certificate, if the certificate is provided.
Verifies the server by checking the certificate chain up to the root certificate that is stored on the client.
Full Verification
Verifies that the server recognizes the client certificate, if the certificate is provided.
Verifies the server by checking the certificate chain up to the root certificate that is stored on the client.
Verifies the server host to ensure that it matches the name stored in the server certificate.
The SSL connection fails if either one of the certificates cannot be verified.
To ensure that the connection to the data source is successful, click Test Connection.
note
It is recommended to use PEM certificates.
note
With self-signed certificates and in some cases with certificates issued by the trusted root entity, you might experience errors when you use the latest JDBC driver version. The SSL connection might fail if your Java keystore does not accept the certificate chains. As a temporary solution, try to downgrade the JDBC driver (for example, for the MySQL connector, you need to switch to the 5.1.40 version.)
Open data source properties. You can open data source properties by using one of the following options:
Navigate to .
Press CtrlAltShift0S.
In the Database Explorer ( ), click the Data Source Properties icon (
).
On the Data Sources tab, select a data source that you want to modify.
Click the SSH/SSL tab and clear the Use SSL checkbox.
Click Apply.
Open data source properties. You can open data source properties by using one of the following options:
Navigate to .
Press CtrlAltShift0S.
In the Database Explorer ( ), click the Data Source Properties icon (
).
On the Data Sources tab, select a data source that you want to modify.
Click the SSH/SSL tab and select the Use SSL checkbox.
Click the Copy from link and select the configuration that you want to copy.
note
In most cases, you do not need to modify the General tab settings after setting the SSH configuration in SSH/SSL tab, as DataGrip will connect to the local end of the SSH tunnel. The exception is when you create an SSH tunnel manually, in that case you need to set
localhostas Host on the General tab.Upon the connection, the SSH tunnel hostname is resolved on the machine with SSH server, as the server establishes connection to a database.
Open data source properties. You can open data source properties by using one of the following options:
Navigate to .
Press CtrlAltShift0S.
In the Database Explorer ( ), click the Data Source Properties icon (
).
Select a data source profile where you want to change connection settings.
Click the SSH/SSL tab and select the Use SSH tunnel checkbox.
Click the Add SSH configuration button (
).In the SSH dialog, click the Add button.
If you do not want to share the configuration between projects, select the Visible only for this project checkbox.
In Host, Username, and Port fields, specify your connection details.
From the Authentication type list, you can select an authentication method:
Password: Access the host with a password. To save the password in DataGrip, select the Save password checkbox.
Key pair (OpenSSH or PuTTY): Use SSH authentication with a key pair. To apply this authentication method, you must have a private key on the client machine and a public key on the remote server. DataGrip supports private keys that are generated with the OpenSSH utility.
Specify the path to the file where your private key is stored and type the passphrase (if any) in the corresponding fields. To have DataGrip remember the passphrase, select the Save passphrase checkbox.
OpenSSH config and authentication agent: Use a credentials helper application that manages your SSH keys, such as ssh-agent.
Click OK to confirm the new SSH configuration settings.
In the Local port field of Data Sources and Drivers dialog, specify the local port number from which you want to forward the connection. Otherwise, DataGrip selects the port dynamically.
tip
For more information about working with SSH keys, refer to the Generating a new SSH key and adding it to the ssh-agent tutorial.
Open data source properties. You can open data source properties by using one of the following options:
Navigate to .
Press CtrlAltShift0S.
In the Database Explorer ( ), click the Data Source Properties icon (
).
Select a data source profile where you want to change connection settings.
Click the SSH/SSL tab and clear the Use SSH tunnel checkbox.
Click Apply.
Thanks for your feedback!