Issue

The database connection has failed, and the following error message is visible in the logs:

SSL error: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed

Along with

An error occurred while initializing the Runtime: Error on initializing database connection. (SQL State: 08006, Error Code: 0), Detail Message: javax.net.ssl.SSLHandshakeException: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed, sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed,

Environment

• Applications hosted in Mendix Cloud
• Applications hosted in Mendix on Kubernetes

Cause

The error mentioned points to a problem with the SSL certificate validation, indicating that the certificate has expired.

Solution/Workaround

To resolve this issue, updating the SSL Certificate will be necessary.

Below, you will find the detailed steps to update the Certificate in the SAP Private Cloud.

Steps to update the SSL Certificate:

1. Obtain a New SSL Certificate:
   • Acquire a new SSL certificate from your certificate authority. Ensure that you receive the certificate file in the required format (e.g., .pem file).
2. Upload the new SSL Certificate to SAP BTP:
   • Use the SAP BTP Cockpit or the Cloud Foundry CLI to upload the new certificate to your application environment.
3. Restart the app.

Using SAP BTP Cockpit:

1. Navigate to your application in the SAP BTP Cockpit.
2. Go to the Environment Variables section.
3. Add or update the environment variable that points to your SSL certificate. For example, if you have an environment variable SSL_CERT_PATH. Update its value to the path of the new certificate.

Additional information 

• Mendix documentation: Certificates
• Other documentation: CA/Included Certificates
• Related KBA: Client Certificates: PKIX path building failed