Using SSL in PostgreSQL JDBC connections

[jonsnowseven]

Hello.

We are trying to configure sslmode in the JDBC PostgreSQL URL like this: <JDBC URL>/?sslmode=verify-full&sslfactory=org.postgresql.ssl.DefaultJavaSSLFactory. I get the following error launching Apicurio Registry Image in K8s: Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.

If I simply use sslmode=verify-full, I get the following error: Caused by: io.apicurio.registry.storage.error.RegistryStorageException: org.postgresql.util.PSQLException: Could not open SSL root certificate file ?/.postgresql/root.crt.

I couldn't find a guide to correctly configure SSL.

Is there a guide to configure this correctly? Is Apicurio Registry's docker image built to support configuring SSL?

Thank you in advance

[EricWittmann]

Looks like you're missing at least the root SSL certificate. You should be able to provide that in k8s via a mounted volume and then point to it in your JDBC configuration using the sslrootcert param.

[EricWittmann]

https://jdbc.postgresql.org/documentation/ssl/

Other possible necessary params are sslcert and sslkey for the client cert info.