PKIX Path Building Failed Error on macOS M1 - Certificate Issue Not Resolved while connecting to AWS Athena through DB Connector node.

I’m encountering a PKIX path building failed error when running KNIME on my MacBook M1. From what I understand, this is typically caused by the application using a standalone Java environment that doesn’t share the system’s certificate store.

I added the following line to my knime.ini file:

-Djavax.net.ssl.trustStoreType=KeychainStore

However, the error persists even after this change.

Any guidance or suggestions would be greatly appreciated!

Context: This is while connecting to AWS Athena from DB Connector node.

Environment:

  • KNIME Version: 5.9.0
  • OS: macOS (MacBook M1)
  • Issue: PKIX path building failed error

Hello @exploredata547,

for PKIX related errors see here. It’s nicely explained:

If I may ask have you tried Amazon Athena Connector node?

Br,
Ivan

2 Likes

In our case, It’s not possible to use Amazon Athena Connector node.. we need some custom driver and JDBC configuration details…

But, I will check video that you suggested…

Thank you for sharing the solution in the video, I appreciate the guidance!

However, I wanted to bring up an important consideration: the majority of our users are non-technical, and they rely on KNIME as a no-code/low-code tool. When we’re positioning KNIME as an alternative to platforms like Alteryx, seamless, user-friendly solutions become critical.

Ideally, we’d love to see this functionality work out-of-the-box without requiring workarounds or technical configuration. This would significantly improve the experience for business users who may not have the technical background to implement more complex solutions.

Thanks again for your help !!

1 Like

Please have in mind that most forum members are volunteers and not employees of KNIME.

2 Likes

Hi @exploredata547 , Thank you for the feedback. So, we have to understand the platforms are built on. Alteryx is C# based product and uses the OS certificate. And KNIME AP is mainly JVM based platform which run in JVM not directly on your OS Kernel and doesn’t use OS features.

So with some advantage in Alteryx comes with security restriction, while KNIME AP has better and customizable security features and you configure what you want to use instead of bombarded with features users do not even need.

Comparing KNIME with Alteryx or any other tool at the platform level is comparing Apple to Oranges. That is complex. I can tell you in easy way is (from my understanding) KNIME is Like Linux (Customize on your needs that includes Features and Security) while other tools are like Windows.

2 Likes

Agree with this quote… :+1: