Error when you connect to a database after modifying a CA certificate

Symptoms

  • If the CA certificate of a secure PostgreSQL database server is modified, any running flows that are connected to the database display the Flink job failure error status in the Event Processing UI.

  • When you enter the URL of a secured PostgreSQL database while configuring your database node in the Event Processing UI, the Invalid JDBC URL error is displayed.

  • When you view the logs as a system administrator for either the backend container within the Event Processing pod or the Flink taskmanager while attempting to establish a connection to the database, an error message similar to the following is displayed:

    (CERTIFICATE_UNKNOWN): PKIX path validation failed: java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors
    

Causes

The certificates that are used to validate the identity of the PostgreSQL database server might be modified. Event Processing fails to recognize the certificate secret that was updated and causes the error.

Resolving the problem

To resolve the error, the system administrator must complete the following steps:

  1. Update the secret through Event Processing again.
  2. Delete the Event Processing pod.
  3. Wait for the pods to become ready.