Error when you connect to a database after modifying a CA certificate

Symptoms

  • If the CA certificate of a secure database server is modified, any running flows that are connected to the database stop processing events.

  • When you enter the URL of a secured database while configuring your database node in the Event Processing UI, the Invalid JDBC URL error is displayed.

  • When you view the logs as a system administrator for the Flink taskmanager while attempting to establish a connection to the database, an error message similar to the following is displayed:

    (CERTIFICATE_UNKNOWN): PKIX path validation failed: java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors

Causes

The certificates that are used to validate the identity of the database server might be modified. Event Processing fails to recognize the certificate secret that was updated and causes the error.

Resolving the problem

To resolve the error, the system administrator must complete the following steps:

  1. Update the secret through Event Processing again.
  2. Delete the Event Processing pod.
  3. Wait for the pods to become ready.