search

cloudcaptainsh / cloudcaptain

Issue Tracker for CloudCaptain
13 stars 3 forks source link

New RDS Certificates #232

Closed knocknarea closed 4 years ago

knocknarea commented 4 years ago

Will boxfuse support the new rds-ca-2019 RDS CA?

axelfontaine commented 4 years ago

The new certificates now ship with the Boxfuse client version 1.33.1.1461

Any image built with that version will be able to access RDS instances configured with the 2019 certificates.

knocknarea commented 4 years ago

@axelfontaine I tried this with 1.33.1.1461 and it does not appear to work. I am getting lots of these errors in my application (Java/Postgres)

"PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"

I've tested this on a staging environment with the database instance using the new certificate authority.

Is there anything I am missing (configuration wise) to use the new certificate authority?

I should also add that I am not asking Boxfuse to manage the database, I have the database setup separately, but up to now, I have been able to connect to it via ssl using the pre 2019 CA.