Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add global-bundle.pem to default cert list #567

Closed
wants to merge 1 commit into from

Conversation

v-sathvik
Copy link
Contributor

  • Removed rds-ca-2019-root.pem as it is included in global-bundle.pem.
  • This change simplifies the certificate management in the JDBC driver.

Summary

Add Global Certificate to Enhance Connection Stability with Tableau

Description

This pull request addresses a recent issue where customers experienced connection problems using Tableau Desktop to connect to clusters authenticated with the new rds-ca-rsa2048-g1 CA certificate. To resolve this, the following changes have been implemented in the JDBC driver repository:

  • Global Certificate Addition: Introduced global-bundle.pem to the default certificate list. This bundle includes the latest CA certificates, ensuring broader compatibility and trust chain completeness.
  • Redundancy Removal: Eliminated rds-ca-2019-root.pem from the certificate list. This certificate is redundant as its contents are already included in the global-bundle.pem, streamlining the certificate management process.

Related Issue

Additional Reviewers

@CassieLyu
@sunnie629
@affonsoBQ
@alinaliBQ
@andiem-bq
@alexey-temnikov
@birschick-bq

- Removed rds-ca-2019-root.pem as it is included in global-bundle.pem.
- This change simplifies the certificate management in the JDBC driver.
Copy link
Contributor

@sunnie629 sunnie629 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

do we need to remove rds-ca-2019-root.pem? why not just add the global file rather than replacing the old one? my main worry is that this may break connections for people relying on rds-ca-2019-root.pem

@v-sathvik v-sathvik closed this Apr 17, 2024
@v-sathvik v-sathvik deleted the add-global-cert branch April 17, 2024 17:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants