Not able to connect to Aurora RDS Postgres using "Amazon RDS" Profile after Scheduled Maintenance

Recently, AWS RDS had a required maintenance for updating certs.

https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL-certificate-rotation.html

After this maintenance was completed, we are no longer able to connect to AWS RDS Aurora Postgres using the “Amazon RDS” Profile for SSL.

We are getting below error.

Error:
Cannot connect to Database
2020-01-14 14:43:35{ Error: unable to get local issuer certificate
2020-01-14 14:43:35at TLSSocket.<anonymous> (/opt/app/node_modules/mysql/lib/Connection.js:320:48)
2020-01-14 14:43:35at TLSSocket.emit (events.js:182:13)
2020-01-14 14:43:35at TLSSocket.EventEmitter.emit (domain.js:442:20)
2020-01-14 14:43:35at TLSSocket._finishInit (_tls_wrap.js:629:8)
2020-01-14 14:43:35--------------------
2020-01-14 14:43:35at Protocol._enqueue (/opt/app/node_modules/mysql/lib/protocol/Protocol.js:144:48)
2020-01-14 14:43:35at Protocol.handshake (/opt/app/node_modules/mysql/lib/protocol/Protocol.js:51:23)
2020-01-14 14:43:35at PoolConnection.connect (/opt/app/node_modules/mysql/lib/Connection.js:119:18)
2020-01-14 14:43:35at Pool.getConnection (/opt/app/node_modules/mysql/lib/Pool.js:48:16)
2020-01-14 14:43:35at /opt/app/node_modules/typeorm/driver/mysql/MysqlDriver.js:757:18
2020-01-14 14:43:35at new Promise (<anonymous>)
2020-01-14 14:43:35at MysqlDriver.createPool (/opt/app/node_modules/typeorm/driver/mysql/MysqlDriver.js:754:16)
2020-01-14 14:43:35at MysqlDriver.<anonymous> (/opt/app/node_modules/typeorm/driver/mysql/MysqlDriver.js:267:51)
2020-01-14 14:43:35at step (/opt/app/node_modules/tslib/tslib.js:133:27)
2020-01-14 14:43:35at Object.next (/opt/app/node_modules/tslib/tslib.js:114:57)
2020-01-14 14:43:35at /opt/app/node_modules/tslib/tslib.js:107:75
2020-01-14 14:43:35at new Promise (<anonymous>)
2020-01-14 14:43:35at Object.__awaiter (/opt/app/node_modules/tslib/tslib.js:103:16)
2020-01-14 14:43:35at MysqlDriver.connect (/opt/app/node_modules/typeorm/driver/mysql/MysqlDriver.js:252:24)
2020-01-14 14:43:35at Connection.<anonymous> (/opt/app/node_modules/typeorm/connection/Connection.js:113:58)
2020-01-14 14:43:35at step (/opt/app/node_modules/tslib/tslib.js:133:27)
2020-01-14 14:43:35at Object.next (/opt/app/node_modules/tslib/tslib.js:114:57)
2020-01-14 14:43:35at /opt/app/node_modules/tslib/tslib.js:107:75
2020-01-14 14:43:35at new Promise (<anonymous>)
2020-01-14 14:43:35at Object.__awaiter (/opt/app/node_modules/tslib/tslib.js:103:16)
2020-01-14 14:43:35at Connection.connect (/opt/app/node_modules/typeorm/connection/Connection.js:105:24)
2020-01-14 14:43:35at Object.<anonymous> (/opt/app/node_modules/typeorm/index.js:196:82) code: 'HANDSHAKE_SSL_ERROR', fatal: true }

Since AWS RDS has updated their certs, would the “Amazon RDS” Profile need to be updated in this repo?

Any help would be appreciated.

[dougwilson]

Hi every 👋 a new version of this module with the new Amazon RDS root certificate will be published later today (edit: Jan 20) for everyone, at which time this issue will close out.

I’m a little confused with “Aurora RDS Postgres” mentioned here; I can only assume (like @NickKellett ) that is a typo, otherwise I believe it was probaly reported to the wrong place.

[dougwilson]

Please open a new issue and provide all the details so I can reproduce the issue and debug it. You’re also welcome to make a pull request with the fix. If debugging it requires access to a paid service, let me know and we can communicate off github so you can provide credentials to test 👍