Keycloak on Azure to PostgreSQL "Certificates do not conform to algorithm constraints" (follow up on #17606) #47449

dominiktopp · 2026-03-25T08:22:47Z

dominiktopp
Mar 25, 2026

I have read and understood the above terms for submitting issues, and I understand that my issue may be closed without action if I do not follow them.

core

Not really a bug, but a comment on the closed and locked #17606 for others stumbling uppon this issue (which helped us a lot these days ;) )

A few days ago the Workaround from #17606 (comment) stopped working:
https://dl.cacerts.digicert.com/DigiCertGlobalRootCA.crt.pem gives ERR_SSL_VERSION_OR_CIPHER_MISMATCH

After changing the URL to https://cacerts.digicert.com/DigiCertGlobalRootCA.crt.pem (without the "dl.") it is working again.