Confluence VMSS Deployment in Azure with Azure scripts gives SSL issues

[Deepak Kumar Mishra]

{"code":"DeploymentFailed","message":"At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/arm-deployment-operations for usage details.","details":[{"code":"VMExtensionProvisioningError","message":"VM has reported a failure when processing extension 'prepare-install-script' (publisher 'Microsoft.Azure.Extensions' and type 'CustomScript'). Error message: \"Enable failed: failed to execute command: command terminated with exit status=1\n[stdout]\nException: unable to find valid certification path to requested target\n\tat liquibase.database.DatabaseFactory.openConnection(DatabaseFactory.java:247)\n\tat liquibase.database.DatabaseFactory.openDatabase(DatabaseFactory.java:151)\n\tat liquibase.integration.commandline.CommandLineUtils.createDatabaseObject(CommandLineUtils.java:85)\n\t... 3 more\nCaused by: org.postgresql.util.PSQLException: SSL error: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target\n\tat org.postgresql.ssl.MakeSSL.convert(MakeSSL.java:42)\n\tat org.postgresql.core.v3.ConnectionFactoryImpl.enableSSL(ConnectionFactoryImpl.java:441)\n\tat org.postgresql.core.v3.ConnectionFactoryImpl.tryConnect(ConnectionFactoryImpl.java:94)\n\tat org.postgresql.core.v3.ConnectionFactoryImpl.openConnectionImpl(ConnectionFactoryImpl.java:192)\n\tat org.postgresql.core.ConnectionFactory.openConnection(ConnectionFactory.java:49)\n\tat org.postgresql.jdbc.PgConnection.<init>(PgConnection.java:195)\n\tat org.postgresql.Driver.makeConnection(Driver.java:458)\n\tat org.postgresql.Driver.connect(Driver.java:260)\n\tat liquibase.database.DatabaseFactory.openConnection(DatabaseFactory.java:239)\n\t... 5 more\nCaused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target\n\tat sun.security.ssl.Alert.createSSLException(Alert.java:131)\n\tat sun.security.ssl.TransportContext.fatal(TransportContext.java:331)\n\tat sun.security.ssl.TransportContext.fatal(TransportContext.java:274)\n\tat sun.security.ssl.TransportContext.fatal(TransportContext.java:269)\n\tat sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:654)\n\tat sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:473)\n\tat sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:369)\n\tat sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:377)\n\tat sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:444)\n\tat sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:422)\n\tat sun.security.ssl.TransportContext.dispatch(TransportContext.java:182)\n\tat sun.security.ssl.SSLTransport.decode(SSLTransport.java:152)\n\tat sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1397)\n\tat sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1305)\n\tat sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:440)\n\tat org.postgresql.ssl.MakeSSL.convert(MakeSSL.java:40)\n\t... 13 more\nCaused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target\n\tat sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:456)\n\tat sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:323)\n\tat sun.security.validator.Validator.validate(Validator.java:271)\n\tat sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:315)\n\tat sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:223)\n\tat sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:129)\n\tat sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:638)\n\t... 24 more\nCaused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target\n\tat sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:146)\n\tat sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:127)\n\tat java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)\n\tat sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:451)\n\t... 30 more\n\n\nFor more information, use the --logLevel flag\n2023-10-29T12:49:04+0000|[apply_database_dump]: Liquibase dump failed with and error. Check logs and rectify!!\n\n[stderr]\n\". More information on troubleshooting is available at https://aka.ms/VMExtensionCSELinuxTroubleshoot. "}]}

[Deepak Kumar Mishra]

The issue occurs while installing the data center version. VMSS intalls few extensions to configure SSL with postgres and get these errors. What are ways to avoid this? This is a test installation.

[Deepak Kumar Mishra]

I am not passing any inputs for SSL in this case btw