Quarkus连接AWS DocumentDB遇PKIX证书路径构建失败求助
连接AWS DocumentDB时遭遇PKIX证书路径构建失败问题
我尝试连接AWS托管的DocumentDB实例,最初在application.properties中使用AWS提供的连接字符串:
mongodb://administrator:<insertYourPassword>@mycluster.amazonaws.com:27017/?ssl=true&ssl_ca_certs=rds-combined-ca-bundle.pem&replicaSet=rs0&readPreference=secondaryPreferred&retryWrites=false
但因连接字符串不支持ssl_ca_certs参数而失败。
随后我创建了信任库,并在应用配置中添加以下内容:
quarkus.http.ssl.certificate.trust-store-file=/path/to/rds-truststore.jks quarkus.http.ssl.certificate.trust-store-password=changeit
同时在连接字符串中加入tls=true,但两次尝试均出现相同错误:
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:388) at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:271) at java.base/sun.security.validator.Validator.validate(Validator.java:256) at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:285) at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:144) at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:632) ... 21 more Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141) at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126) at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297) at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:383) ... 26 more
注:已替换示例中的所有占位符。
内容的提问来源于stack exchange,提问作者Saifer
相关产品推荐
相关产品推荐

