javax.net.ssl.SSLHandshakeException: PKIX path building failed:

[walshe]

Hi,

I am new to KDP.. I installed and set up everything I think and then proceeded to running the postgres jdbc source connector..

I am on Windows and originally was having issue with Git bash (e.g. no sudo command available. so then I switched to WSL Ubuntu)

It went about downloading cp-server-connect-base:7.6.1 but then it bombed out with the following:

any ideas what the issue is?

thanks

Unable to find image 'ddev/ddev-utilities:latest' locally
latest: Pulling from ddev/ddev-utilities
4abcf2066143: Pull complete
cd8a4e52c645: Pull complete
Digest: sha256:8830b3c84a5a2de836fcb2c4d0866921b0698d7176ed1f8efed9399057baa14d
Status: Downloaded newer image for ddev/ddev-utilities:latest
18:23:12 ℹ️ 🚀 Running example without any flags
18:23:14 ℹ️ 💀 Kill all docker containers
18:23:22 ℹ️ 🚀 Number of examples ran so far: 1
18:23:22 ℹ️ ####################################################
18:23:22 ℹ️ 🚀 Executing postgres.sh in dir /mnt/c/Users/ewalsh/dev/git/kafka-docker-playground/connect/connect-jdbc-postgresql-source
18:23:22 ℹ️ ####################################################
18:23:22 ℹ️ 💫 Using default CP version 7.6.1
18:23:22 ℹ️ 🎓 Use --tag option to specify different version, see https://kafka-docker-playground.io/#/how-to-use?id=🎯-for-confluent-platform-cp
18:23:22 ℹ️ Using sudo to remove /mnt/c/Users/ewalsh/dev/git/kafka-docker-playground/scripts/../confluent-hub
[sudo] password for ewalsh:
18:23:33 ℹ️ 🧰 Checking if Docker image confluentinc/cp-server-connect-base:7.6.1 contains additional tools
18:23:33 ℹ️ ⏳ it can take a while if image is downloaded for the first time
18:39:16 ℹ️ 👷📦 Re-building Docker image confluentinc/cp-server-connect-base:7.6.1 to include additional tools
[+] Building 1.1s (5/5) FINISHED                                                                                                           docker:default
 => [internal] load build definition from Dockerfile                                                                                                 0.1s
 => => transferring dockerfile: 550B                                                                                                                 0.0s
 => [internal] load metadata for docker.io/confluentinc/cp-server-connect-base:7.6.1                                                                 0.0s
 => [internal] load .dockerignore                                                                                                                    0.0s
 => => transferring context: 2B                                                                                                                      0.0s
 => [1/2] FROM docker.io/confluentinc/cp-server-connect-base:7.6.1                                                                                   0.2s
 => ERROR [2/2] RUN if [ ! -f /tmp/done ]; then curl https://download.rockylinux.org/pub/rocky/8/AppStream/x86_64/kickstart/Packages/t/tcpdump-4.9.  0.7s
------
 > [2/2] RUN if [ ! -f /tmp/done ]; then curl https://download.rockylinux.org/pub/rocky/8/AppStream/x86_64/kickstart/Packages/t/tcpdump-4.9.3-5.el8.x86_64.rpm -o tcpdump-4.9.3-1.el8.x86_64.rpm && rpm -Uvh tcpdump-4.9.3-1.el8.x86_64.rpm && yum -y install --disablerepo='Confluent*' bind-utils openssl unzip findutils net-tools nc jq which iptables libmnl krb5-workstation krb5-libs vim && yum clean all && rm -rf /var/cache/yum && touch /tmp/done; fi:
0.263   % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
0.263                                  Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
0.548 curl: (60) SSL certificate problem: self signed certificate in certificate chain
0.548 More details here: https://curl.haxx.se/docs/sslcerts.html
0.548
0.548 curl failed to verify the legitimacy of the server and therefore could not
0.548 establish a secure connection to it. To learn more about this situation and
0.548 how to fix it, please visit the web page mentioned above.
------
Dockerfile:3
--------------------
   1 |     FROM confluentinc/cp-server-connect-base:7.6.1
   2 |     USER root
   3 | >>> RUN if [ ! -f /tmp/done ]; then curl https://download.rockylinux.org/pub/rocky/8/AppStream/x86_64/kickstart/Packages/t/tcpdump-4.9.3-5.el8.x86_64.rpm -o tcpdump-4.9.3-1.el8.x86_64.rpm && rpm -Uvh tcpdump-4.9.3-1.el8.x86_64.rpm && yum -y install --disablerepo='Confluent*' bind-utils openssl unzip findutils net-tools nc jq which iptables libmnl krb5-workstation krb5-libs vim && yum clean all && rm -rf /var/cache/yum && touch /tmp/done; fi
   4 |     USER appuser
   5 |
--------------------
ERROR: failed to solve: process "/bin/sh -c if [ ! -f /tmp/done ]; then curl https://download.rockylinux.org/pub/rocky/8/AppStream/x86_64/kickstart/Packages/t/tcpdump-4.9.3-5.el8.x86_64.rpm -o tcpdump-4.9.3-1.el8.x86_64.rpm && rpm -Uvh tcpdump-4.9.3-1.el8.x86_64.rpm && yum -y install --disablerepo='Confluent*' bind-utils openssl unzip findutils net-tools nc jq which iptables libmnl krb5-workstation krb5-libs vim && yum clean all && rm -rf /var/cache/yum && touch /tmp/done; fi" did not complete successfully: exit code: 60
18:39:19 ℹ️ 🎱 Installing connector confluentinc/kafka-connect-jdbc:latest
18:39:21 🔥 ❌ failed to install connector confluentinc/kafka-connect-jdbc:latest
Running in a "--no-prompt" mode
javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Error: Unknown error