Error "Peer certificate cannot be authenticated with given CA certificates" When Connecting to Presto Using LDAP Authentication

Issue

When connecting Tableau Desktop to a Presto database using LDAP authentication, the following error may occur:

[Simba][Presto] (1020) Error with HTTP API at https://<server address>:8443/v1/statement : Peer certificate cannot be authenticated with given CA certificates'

Environment

Tableau Desktop
Presto

Resolution

Apply a .tdc file to allow the use of a self-signed certificate and to configure the certificate file path. For example:

Download the sample .tdc file attached to this article, open the file in a text editor, and update the file with the certificate file path.
Save the .tdc file to the Datasources sub-folder in your 'My Tableau Repository' folder.

On a Mac computer, either OpenSSL or Keychain Access can be used to obtain the certificate chain file, which is a concatenation of all of x509 PEM-encoded certificates that form the certificate chain for the database server certificate. For example:

Open the URL in Google Chrome, and click on the 'View site information' (padlock) button > Certificate, to view the certificate details, which includes the certificate chain (or certificate path).
To export each certificate in the certificate chain, select the certificate in the chain, and drag the certificate from the lower half of the dialog box onto your desktop.
To convert each certificate from binary DER encoding to x509 PEM encoding, add the certificate to the system keychain using Keychain Access, and then export it in the 'Privacy Enhanced Mail (.pem)' file format.
To create the certificate chain file, open each PEM-encoded certificate file in a text editor (e.g. TextEdit), and combine the contents of each file, including the beginning and end tags on each certificate. The result should look like this:
-----BEGIN CERTIFICATE-----
(cert1.pem)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(cert2.pem)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(cert3.pem)
-----END CERTIFICATE-----

Note: In the above example, cert1.pem is the server certificate (at the bottom of the certificate path).

Cause

The server SSL certificate could not be validated. This may be due to the use of a self-signed certificate on the database server, or for Tableau Desktop on macOS, the certificate chain file is required.