Amazon RDS SSL Issue

0
Hi. I'm using Docker deploy with Amazon RDS PostgreSQL RDS changed the SSL Certificate to a new one, but an error occurs as shown below WARNING - ConnectionBus: Database connections: 0 active, 0 idle. ERROR - ConnectionBus: Opening JDBC connection to jdbc:postgresql://****.ap-northeast-2.rds.amazonaws.com:5432/****?tcpKeepAlive=true&sslrootcert=%2Fopt%2Fmendix%2Fbuild%2F.postgresql%2Famazon-rds-ca.pem&sslmode=verify-full failed with SQLState: 08006 Error code: 0 Message: "SSL error: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target", giving up...(4/4) Caused by: com.mendix.connectionbus.ConnectionBusRuntimeException: Error on initializing database connection. (SQL State: 08006, Error Code: 0), Detail Message: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target, sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target, sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at com.mendix.connectionbus.util.ExceptionInfo$.createClearException(ExceptionInfo.scala:19) Caused by: org.postgresql.util.PSQLException: SSL error: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target ERROR: Starting application failed: Application start failed   Please tell me how to solve it. Thanks
asked
2 answers
1

Do you use a recent version of the cf-mendix-buildpack? In the 5.0.13 release, Mendix added support for regional CA certificates.

answered
1

You can update the version of the buildpack in the Dockerfile you are using: https://github.com/mendix/docker-mendix-buildpack/blob/ed51abd7b5f18a15d7abfb5736ea2356a3546ea8/rootfs-builder.dockerfile#L13 

 

Change this to v5.0.13 or higher

answered