search

aws / amazon-documentdb-jdbc-driver

Amazon DocumentDB JDBC driver to connect from BI tools and execute SQL Queries
Apache License 2.0
13 stars 14 forks source link

Tableau Server package signature #554

Open mishelzz opened 10 months ago

mishelzz commented 10 months ago

Environment

Problem Description

  1. Steps to reproduce: Install Tableau Desktop 2022.3 later, Install .taco file Connector, try to connect to an Amazon DocumentDB server from Tableau Desktop.
  2. Expected behaviour: Successful connect.
  3. Actual behaviour: Package signature is invalid error message appears.
  4. Error message/stack trace: unverified package signature
  5. Any other details that can be helpful: Probably the signature has expired, a connection from Tableau Desktop to Amazon DocumentDB can't be established.
lukebru81 commented 9 months ago

The problem is the Algorithm, SHA1 is Weak and Tableau consider the package not signed. The Tableau JRE settings disable the algorithm, by enabling SHA1 in the java.security file the error no longer occurs, but this configuration is a security issue.

You should sign the package with a more secure algorithm.

This problem does not allow the use of the connector.

Verified on tableau server 2023.1.6

YBadiss commented 5 months ago

Was there any fix for this? It prevents us from using DocumentDB with Tableau Desktop, essentially this connector is useless.

@lukebru81 can you explain your steps to re-enable SHA1 in java.security? On macos I modified /Library/Java/JavaVirtualMachines/jdk-21.jdk/Contents/Home/conf/security/java.security to remove references to SHA1 in jdk.certpath.disabledAlgorithms and jdk.security.legacyAlgorithms but I still get the same error in Tableau Desktop.