Cannot connect to sqlserver using debezium/connect version 2.0.1

[Krishnanand Khambadkone]

Hello Folks,  The debezium/connect docker container is running in openshift.  I am trying to deploy this definition,   I keep getting the error .  The java version inside the container is v11.    I have a local confluent setup where this exact same definition deploys fine but the java version being used is v8.

{"error_code":400,"message":"Connector configuration is invalid and contains the following 1 error(s):\nUnable to connect. Check this and other connection properties. Error: The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: \"Certificates do not conform to algorithm constraints\". ClientConnectionId:f10541f7-32de-488d-81da-e627dd1f62d1\nYou can also find the above list of errors at the endpoint `/connector-plugins/{connectorType}/config/validate`"}%

{

 "name": "inventory-connector",

 "config": {

     "connector.class" : "io.debezium.connector.sqlserver.SqlServerConnector",

     "tasks.max" : "1",

     "database.server.name" : "maserver1",

     "database.hostname" : "DBMS-STG.acme.com",

     "database.port" : "1433",

     "database.user" : "*************",

     "database.password" : "***********",

     "database.names" : "idxdb",

     "topic.prefix": "search",

     "table.include.list": "dbo.ProdLog",      

     "database.encrypt": "false",

     "database.trustServerCertificate": "true"

     }

 }

[Chris Cranford]

Hi -

Java 11 disabled several algorithms that were enabled on Java 8; which is why your JDK8 environment has no issue.
Please see DBZ-4167 [1] for details on what needs to change in your container image's set-up.

Thanks
Chris

[1]: https://issues.redhat.com/browse/DBZ-4167

--
You received this message because you are subscribed to the Google Groups "debezium" group.
To unsubscribe from this group and stop receiving emails from it, send an email to debezium+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/debezium/be19637f-bbf6-45bf-bd00-aa577898b3fcn%40googlegroups.com.

[Chris Cranford]

Yes, please.

On 4/4/24 20:28, Krishnanand Khambadkone wrote:

Chris,  Thank you for the quick response.  So should I go ahead and edit the /etc/crypto-policies/back-ends/java.config file to enable these algorithms?

To view this discussion on the web visit https://groups.google.com/d/msgid/debezium/c18822fe-3371-45b3-a3d3-adb7e4e0b129n%40googlegroups.com.