error fetching from postgres, err: x509: certificate signed by unknown authority

Question

i have i virtual network where in 1 subnet my aks cluster is present and another subnet my private postgress flexible server is present.

i am connecting my application from aks cluster to private postgress server through private network using "sslmode=require" ,
while trying to connect i am getting error in my application pod "error fetching from postgres, err: x509: certificate signed by unknown authority"

PostgreSQL version : 16.3

can you tell me how to solve this error, do i need to add any certificate if yes then in which place ?

Answer 1

Based on this article :

To have a CA certificate available to the client Certification needs to be added to the system or it can be supplied via -ca-cert/-ca-path or related environmental variables.

We can apply these two ways: 

• Use either the environment variable VAULT_CACERT or the vault CLI flag -ca-cert=with a value that is the full path to the PEM encoded CA certificate file
• Use either the environment variable VAULT_CAPATH, or the vault CLI flag -ca-path= with a value that is the full path to a directory containing certificates including that of the relevant CA

If we like to disable checking for testing purposes we can use  tls_skip_verify

Disable verification of TLS certificates. Using this option is highly discouraged.

https://support.hashicorp.com/hc/en-us/articles/8107320508947-x509-certificate-signed-by-unknown-authority

https://stackoverflow.com/questions/23615411/postgresql-pq-open-not-successful-x509-certificate-signed-by-unknown-authority