Confluence VMSS Deployment in Azure with Azure scripts gives SSL issues
Asked by Deepak Kumar Mishra:

{"code":"DeploymentFailed","message":"At least one resource deployment operation failed. Please list deployment operations for details. Please see <https://aka.ms/arm-deployment-operations> for usage details.","details":\[{"code":"VMExtensionProvisioningError","message":"VM has reported a failure when processing extension 'prepare-install-script' (publisher 'Microsoft.Azure.Extensions' and type 'CustomScript'). Error message: \\"Enable failed: failed to execute command: command terminated with exit status=1\\n\[stdout\]\\nException: unable to find valid certification path to requested target\\n\\tat liquibase.database.DatabaseFactory.openConnection(DatabaseFactory.java:247)\\n\\tat liquibase.database.DatabaseFactory.openDatabase(DatabaseFactory.java:151)\\n\\tat liquibase.integration.commandline.CommandLineUtils.createDatabaseObject(CommandLineUtils.java:85)\\n\\t... 3 more\\nCaused by: org.postgresql.util.PSQLException: SSL error: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target\\n\\tat org.postgresql.ssl.MakeSSL.convert(MakeSSL.java:42)\\n\\tat org.postgresql.core.v3.ConnectionFactoryImpl.enableSSL(ConnectionFactoryImpl.java:441)\\n\\tat org.postgresql.core.v3.ConnectionFactoryImpl.tryConnect(ConnectionFactoryImpl.java:94)\\n\\tat org.postgresql.core.v3.ConnectionFactoryImpl.openConnectionImpl(ConnectionFactoryImpl.java:192)\\n\\tat org.postgresql.core.ConnectionFactory.openConnection(ConnectionFactory.java:49)\\n\\tat org.postgresql.jdbc.PgConnection.\<init\>(PgConnection.java:195)\\n\\tat org.postgresql.Driver.makeConnection(Driver.java:458)\\n\\tat org.postgresql.Driver.connect(Driver.java:260)\\n\\tat liquibase.database.DatabaseFactory.openConnection(DatabaseFactory.java:239)\\n\\t... 5 more\\nCaused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target\\n\\tat sun.security.ssl.Alert.createSSLException(Alert.java:131)\\n\\tat sun.security.ssl.TransportContext.fatal(TransportContext.java:331)\\n\\tat sun.security.ssl.TransportContext.fatal(TransportContext.java:274)\\n\\tat sun.security.ssl.TransportContext.fatal(TransportContext.java:269)\\n\\tat sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:654)\\n\\tat sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:473)\\n\\tat sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:369)\\n\\tat sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:377)\\n\\tat sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:444)\\n\\tat sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:422)\\n\\tat sun.security.ssl.TransportContext.dispatch(TransportContext.java:182)\\n\\tat sun.security.ssl.SSLTransport.decode(SSLTransport.java:152)\\n\\tat sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1397)\\n\\tat sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1305)\\n\\tat sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:440)\\n\\tat org.postgresql.ssl.MakeSSL.convert(MakeSSL.java:40)\\n\\t... 13 more\\nCaused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target\\n\\tat sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:456)\\n\\tat sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:323)\\n\\tat sun.security.validator.Validator.validate(Validator.java:271)\\n\\tat sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:315)\\n\\tat sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:223)\\n\\tat sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:129)\\n\\tat sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:638)\\n\\t... 24 more\\nCaused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target\\n\\tat sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:146)\\n\\tat sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:127)\\n\\tat java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)\\n\\tat sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:451)\\n\\t... 30 more\\n\\n\\nFor more information, use the --logLevel flag\\n2023-10-29T12:49:04+0000\|\[apply_database_dump\]: Liquibase dump failed with and error. Check logs and rectify!!\\n\\n\[stderr\]\\n\\". More information on troubleshooting is available at <https://aka.ms/VMExtensionCSELinuxTroubleshoot>. "}\]}


Answers:
author: Deepak Kumar Mishra
body: The issue occurs while installing the data center version. VMSS intalls few extensions to configure SSL with postgres and get these errors. What are ways to avoid this? This is a test installation.

comments: author: Deepak Kumar Mishra
body: I am not passing any inputs for SSL in this case btw


Tags: cloud

confluence-cloud