Message-ID: <gh-pgjdbc-pgjdbc-3349@github.com>
From: "Shalaka1197 (@Shalaka1197)" <noreply+Shalaka1197@github.com>
To: "pgjdbc/pgjdbc" <noreply+pgjdbc-pgjdbc@github.com>
Date: Mon, 19 Aug 2024 10:53:49 +0000
Subject: [pgjdbc/pgjdbc] issue #3349: SSL connection is not established
List-Id: <gh-pgjdbc-pgjdbc.github.com>
X-GitHub-Author-Id: 120441073
X-GitHub-Author-Login: Shalaka1197
X-GitHub-Issue: 3349
X-GitHub-Repo: pgjdbc/pgjdbc
X-GitHub-State: open
X-GitHub-Type: issue
X-GitHub-Url: https://github.com/pgjdbc/pgjdbc/issues/3349
Content-Type: text/plain; charset=utf-8

I am getting below exception when I am trying to connect to postgres using ssl. I am connecting by using root.crt file and verify-full mode.


`Caused by: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors,  at java.base/sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:369),  at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:275),  at java.base/sun.security.validator.Validator.validate(Validator.java:264),  at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:231),  at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:132),  at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1341),  ... 84 common frames omittedCaused by: java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors,  at java.base/sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:157),  at java.base/sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(PKIXCertPathValidator.java:83),  at java.base/java.security.cert.CertPathValidator.validate(CertPathValidator.java:309),  at java.base/sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:364),  ... 89 common frames omitted`

@davecramer Please let me know what can be the issue ?