I've encountered this issue and could use some help with it as well.
When setting up a secure connection to Presto, I used a certificate generated using the recommended commands from the secure Presto configuration documentation.
When configuring Metabase to connect to it, I received an error that led me to try converting the JKS file to PKCS12.
keytool -importkeystore -srckeystore presto-keystore.jks -destkeystore presto-keystore.p12 -srcstoretype JKS -deststoretype PKCS12 -deststorepass <password_here>
When attempting to connect to the Presto DB with the PKCS12, I see the same
Caused by: java.io.IOException: toDerInputStream rejects tag type 100
at java.base/sun.security.util.DerValue.toDerInputStream(Unknown Source)
at java.base/sun.security.pkcs12.PKCS12KeyStore.engineLoad(Unknown Source)
at java.base/sun.security.util.KeyStoreDelegator.engineLoad(Unknown Source)
at java.base/java.security.KeyStore.load(Unknown Source)
at com.facebook.presto.jdbc.internal.client.OkHttpUtil.setupSsl(OkHttpUtil.java:169)
... 35 more
I'm not much good with Java, nor certificates, so I had some difficulty deciphering what this error is telling me beyond that it doesn't like the cert. I believe this is the source code.