You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
From 11.4.4-MariaDB and onwards SSL checking is enabled by default.
To disable this behavior/revert the old behavior, one of its ways is to specify it in a configuration file.
Something like: /etc/mysql/my.cnf
[client-mariadb]
disable-ssl-verify-server-cert
This works like a charm, but not for drush, because they use the argument --defaults-file what specifies a file to load configuration from but also disables all other “default” configuration files.
Could we switch and use --defaults-extra-file instead? This still allows connecting with credentials to the database by file and has the least side effects.
But still loads other default files in.
To Reproduce
create a configuration file /etc/mysql/my.cnf with the following contents
[client-mariadb]
disable-ssl-verify-server-cert
Connect to a database that has SSL disabled or an invalid certificate.
Expected behavior
A successfull connection to mysql, eg
Welcome to the MariaDB monitor. Commands end with ; or \g.
Your MySQL connection id is ...
Actual behavior
What happened instead?
Got the following error: ERROR 2026 (HY000): TLS/SSL error: Certificate verification failure: The certificate is NOT trusted.
Workaround
Adding an argument --extra=--skip-ssl to all sql-based commands does work as well, but is not desirable.
Also, for dump --extra-dump=--skip-ssl is needed.
System Configuration
Q
A
Drush version?
13.3.3.0
Drupal version?
10.x
PHP version
8.x
OS?
Linux
Additional information
Kinda related, or I did find this issue while working on #6183
All started when mysql-client updated on the server.
The text was updated successfully, but these errors were encountered:
Describe the bug
From 11.4.4-MariaDB and onwards SSL checking is enabled by default.
To disable this behavior/revert the old behavior, one of its ways is to specify it in a configuration file.
Something like:
/etc/mysql/my.cnf
This works like a charm, but not for drush, because they use the argument
--defaults-file
what specifies a file to load configuration from but also disables all other “default” configuration files.Could we switch and use
--defaults-extra-file
instead? This still allows connecting with credentials to the database by file and has the least side effects.But still loads other default files in.
To Reproduce
create a configuration file
/etc/mysql/my.cnf
with the following contentsConnect to a database that has SSL disabled or an invalid certificate.
Expected behavior
A successfull connection to mysql, eg
Actual behavior
What happened instead?
Got the following error:
ERROR 2026 (HY000): TLS/SSL error: Certificate verification failure: The certificate is NOT trusted.
Workaround
Adding an argument
--extra=--skip-ssl
to all sql-based commands does work as well, but is not desirable.Also, for dump
--extra-dump=--skip-ssl
is needed.System Configuration
Additional information
Kinda related, or I did find this issue while working on #6183
All started when mysql-client updated on the server.
The text was updated successfully, but these errors were encountered: