jiezais88 opened a new issue, #8346:
URL: https://github.com/apache/seatunnel/issues/8346

   ### Search before asking
   
   - [X] I had searched in the 
[issues](https://github.com/apache/seatunnel/issues?q=is%3Aissue+label%3A%22bug%22)
 and found no similar issues.
   
   
   ### What happened
   
   io.debezium.connector.sqlserver.SqlServerConnection 
256行,如果没有这个参数;encrypt=true;trustServerCertificate=true;有些SqlServer是连不上的,配置文件里面base-url写的这个参数并没有生效,希望改进
   
![image](https://github.com/user-attachments/assets/08ed07c0-7152-4fff-9a21-293bdc7e6b7b)
   
![image](https://github.com/user-attachments/assets/2b2550f8-1b03-46d0-89dd-b46f38041dd7)
   
   
   ### SeaTunnel Version
   
   2.3.8
   
   ### SeaTunnel Config
   
   ```conf
   #
   # Licensed to the Apache Software Foundation (ASF) under one or more
   # contributor license agreements.  See the NOTICE file distributed with
   # this work for additional information regarding copyright ownership.
   # The ASF licenses this file to You under the Apache License, Version 2.0
   # (the "License"); you may not use this file except in compliance with
   # the License.  You may obtain a copy of the License at
   #
   #    http://www.apache.org/licenses/LICENSE-2.0
   #
   # Unless required by applicable law or agreed to in writing, software
   # distributed under the License is distributed on an "AS IS" BASIS,
   # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   # See the License for the specific language governing permissions and
   # limitations under the License.
   #
   ######
   ###### This config file is a demonstration of streaming processing in 
seatunnel config
   ######
   
   env {
     parallelism = 1
     job.mode = "STREAMING"
   }
   
   source {
     SqlServer-CDC {
       result_table_name = "fake"
       username = "*"
       password = "*"
       startup.mode="initial"
       database-names = ["JUN"]
       table-names = ["JUN.AAA.Orders"]
       base-url = 
"jdbc:sqlserver://*:*;databaseName=JUN;encrypt=true;trustServerCertificate=true;"
     }
   }
   
   transform {
   }
   
   sink {
     console {
       source_table_name="fake"
     }
   }
   ```
   
   
   ### Running Command
   
   ```shell
   无
   ```
   
   
   ### Error Exception
   
   ```log
   Exception in thread "main" 
org.apache.seatunnel.core.starter.exception.CommandExecuteException: SeaTunnel 
job executed failed
           at 
org.apache.seatunnel.core.starter.seatunnel.command.ClientExecuteCommand.execute(ClientExecuteCommand.java:213)
           at org.apache.seatunnel.core.starter.SeaTunnel.run(SeaTunnel.java:40)
           at 
org.apache.seatunnel.core.starter.seatunnel.SeaTunnelClient.main(SeaTunnelClient.java:34)
   Caused by: 
org.apache.seatunnel.engine.common.exception.SeaTunnelEngineException: 
org.apache.seatunnel.engine.server.checkpoint.CheckpointException: 
CheckpointCoordinator inside have error.
           at 
org.apache.seatunnel.engine.server.checkpoint.CheckpointCoordinator.handleCoordinatorError(CheckpointCoordinator.java:281)
           at 
org.apache.seatunnel.engine.server.checkpoint.CheckpointCoordinator.handleCoordinatorError(CheckpointCoordinator.java:277)
           at 
org.apache.seatunnel.engine.server.checkpoint.CheckpointCoordinator.reportCheckpointErrorFromTask(CheckpointCoordinator.java:390)
           at 
org.apache.seatunnel.engine.server.checkpoint.CheckpointManager.reportCheckpointErrorFromTask(CheckpointManager.java:184)
           at 
org.apache.seatunnel.engine.server.checkpoint.operation.CheckpointErrorReportOperation.runInternal(CheckpointErrorReportOperation.java:48)
           at 
org.apache.seatunnel.engine.server.task.operation.TracingOperation.run(TracingOperation.java:44)
           at 
com.hazelcast.spi.impl.operationservice.Operation.call(Operation.java:189)
           at 
com.hazelcast.spi.impl.operationservice.impl.OperationRunnerImpl.call(OperationRunnerImpl.java:273)
           at 
com.hazelcast.spi.impl.operationservice.impl.OperationRunnerImpl.run(OperationRunnerImpl.java:248)
           at 
com.hazelcast.spi.impl.operationservice.impl.OperationRunnerImpl.run(OperationRunnerImpl.java:471)
           at 
com.hazelcast.spi.impl.operationexecutor.impl.OperationThread.process(OperationThread.java:197)
           at 
com.hazelcast.spi.impl.operationexecutor.impl.OperationThread.process(OperationThread.java:137)
           at 
com.hazelcast.spi.impl.operationexecutor.impl.OperationThread.executeRun(OperationThread.java:123)
           at 
com.hazelcast.internal.util.executor.HazelcastManagedThread.run(HazelcastManagedThread.java:102)
   Caused by: org.apache.seatunnel.common.utils.SeaTunnelException: 
org.apache.seatunnel.common.utils.SeaTunnelException: Error to discover tables: 
"encrypt" property is set to "true" and "trustServerCertificate" property is 
set to "false" but the driver could not establish a secure connection to SQL 
Server by using Secure Sockets Layer (SSL) encryption: Error: PKIX path 
building failed: sun.security.provider.certpath.SunCertPathBuilderException: 
unable to find valid certification path to requested target. 
ClientConnectionId:3cf6ee20-7d1e-4580-9f30-9787206eabe1
           at 
org.apache.seatunnel.connectors.seatunnel.cdc.sqlserver.source.SqlServerDialect.discoverDataCollections(SqlServerDialect.java:94)
           at 
org.apache.seatunnel.connectors.seatunnel.cdc.sqlserver.source.SqlServerDialect.discoverDataCollections(SqlServerDialect.java:51)
           at 
org.apache.seatunnel.connectors.cdc.base.source.IncrementalSource.createEnumerator(IncrementalSource.java:200)
           at 
org.apache.seatunnel.engine.server.task.SourceSplitEnumeratorTask.restoreState(SourceSplitEnumeratorTask.java:201)
           at 
org.apache.seatunnel.engine.server.checkpoint.operation.NotifyTaskRestoreOperation.lambda$runInternal$0(NotifyTaskRestoreOperation.java:107)
           at 
java.base/java.util.concurrent.CompletableFuture$AsyncRun.run(CompletableFuture.java:1736)
           at 
org.apache.seatunnel.api.tracing.MDCRunnable.run(MDCRunnable.java:39)
           at 
java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
           at 
java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
           at java.base/java.lang.Thread.run(Thread.java:834)
   Caused by: com.microsoft.sqlserver.jdbc.SQLServerException: "encrypt" 
property is set to "true" and "trustServerCertificate" property is set to 
"false" but the driver could not establish a secure connection to SQL Server by 
using Secure Sockets Layer (SSL) encryption: Error: PKIX path building failed: 
sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
valid certification path to requested target. 
ClientConnectionId:3cf6ee20-7d1e-4580-9f30-9787206eabe1
           at 
com.microsoft.sqlserver.jdbc.SQLServerConnection.terminate(SQLServerConnection.java:4271)
           at 
com.microsoft.sqlserver.jdbc.TDSChannel.enableSSL(IOBuffer.java:1965)
           at 
com.microsoft.sqlserver.jdbc.SQLServerConnection.connectHelper(SQLServerConnection.java:3797)
           at 
com.microsoft.sqlserver.jdbc.SQLServerConnection.login(SQLServerConnection.java:3385)
           at 
com.microsoft.sqlserver.jdbc.SQLServerConnection.connectInternal(SQLServerConnection.java:3194)
           at 
com.microsoft.sqlserver.jdbc.SQLServerConnection.connect(SQLServerConnection.java:1971)
           at 
com.microsoft.sqlserver.jdbc.SQLServerDriver.connect(SQLServerDriver.java:1263)
           at 
io.debezium.jdbc.JdbcConnection.lambda$patternBasedFactory$1(JdbcConnection.java:244)
           at 
io.debezium.jdbc.JdbcConnection$ConnectionFactoryDecorator.connect(JdbcConnection.java:129)
           at 
io.debezium.jdbc.JdbcConnection.connection(JdbcConnection.java:888)
           at 
io.debezium.connector.sqlserver.SqlServerConnection.connection(SqlServerConnection.java:281)
           at 
io.debezium.jdbc.JdbcConnection.connection(JdbcConnection.java:883)
           at io.debezium.jdbc.JdbcConnection.query(JdbcConnection.java:548)
           at io.debezium.jdbc.JdbcConnection.query(JdbcConnection.java:496)
           at 
org.apache.seatunnel.connectors.seatunnel.cdc.sqlserver.utils.TableDiscoveryUtils.listTables(TableDiscoveryUtils.java:46)
           at 
org.apache.seatunnel.connectors.seatunnel.cdc.sqlserver.source.SqlServerDialect.discoverDataCollections(SqlServerDialect.java:91)
           ... 9 more
   Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: 
sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
valid certification path to requested target
           at 
java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131)
           at 
java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:376)
           at 
java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:319)
           at 
java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:314)
           at 
java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:654)
           at 
java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:473)
           at 
java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:369)
           at 
java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392)
           at 
java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:478)
           at 
java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:456)
           at 
java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:199)
           at 
java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:172)
           at 
java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1383)
           at 
java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1296)
           at 
java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:416)
           at 
java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:388)
           at 
com.microsoft.sqlserver.jdbc.TDSChannel.enableSSL(IOBuffer.java:1854)
           ... 23 more
   Caused by: sun.security.validator.ValidatorException: PKIX path building 
failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to 
find valid certification path to requested target
           at 
java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:439)
           at 
java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:306)
           at 
java.base/sun.security.validator.Validator.validate(Validator.java:264)
           at 
java.base/sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:313)
           at 
java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:233)
           at 
java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:110)
           at 
com.microsoft.sqlserver.jdbc.HostNameOverrideX509TrustManager.checkServerTrusted(SQLServerTrustManager.java:88)
           at 
java.base/sun.security.ssl.AbstractTrustManagerWrapper.checkServerTrusted(SSLContextImpl.java:1499)
           at 
java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:638)
           ... 35 more
   Caused by: sun.security.provider.certpath.SunCertPathBuilderException: 
unable to find valid certification path to requested target
           at 
java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:148)
           at 
java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:129)
           at 
java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)
           at 
java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:434)
           ... 43 more
   
           ... 12 more
   
           at 
org.apache.seatunnel.core.starter.seatunnel.command.ClientExecuteCommand.execute(ClientExecuteCommand.java:205)
           ... 2 more
   ```
   
   
   ### Zeta or Flink or Spark Version
   
   _No response_
   
   ### Java or Scala Version
   
   _No response_
   
   ### Screenshots
   
   _No response_
   
   ### Are you willing to submit PR?
   
   - [ ] Yes I am willing to submit a PR!
   
   ### Code of Conduct
   
   - [X] I agree to follow this project's [Code of 
Conduct](https://www.apache.org/foundation/policies/conduct)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscr...@seatunnel.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to