Hello Rob,
--
With root.crt in ~/.postgresql, testing the jdbc connection from a
tomcat server generates this failure (again either localhost or $(hostname))
Blow out on db connection to jdbc:postgresql://localhost:5432/postgres;
SSL error: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to requested target
org.postgresql.util.PSQLException: SSL error: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to requested target
Java has its own certificate keystore, you would need to add your certificate to it: https://tomcat.apache.org/tomcat-8.5-doc/ssl-howto.html
Hope this helps.
Tiemen Ruiten
Infrastructure Engineer