Question

Does my client need to use the CA certificate to connect to the managed MySQL databases?

Posted November 5, 2019 595 views
DigitalOcean Managed MySQL Database

Hi! I am trying to use a managed MySQL database with my Rails app. I thought that I had to have the client use the CA certificate that I can download from the DO control panel for the MySQL cluster, but if I specify that I get the error SSL_CTX_set_default_verify_paths failed. If I don’t specify the certificate, I can connect to the database. Since ssl_mode is still set to required in the connection string, can I rest assured that the connection between the database and the clients is encrypted?

Thanks in advance

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

×
1 answer

Hello, @vito

In order to secure your MySQL Managed Database you can check our official documentation: https://www.digitalocean.com/docs/databases/mysql/how-to/secure/

And check this link as well: https://dev.mysql.com/doc/refman/8.0/en/using-encrypted-connections.html

In order to secure MySQL connections on Ubuntu droplet you can check: https://www.digitalocean.com/community/tutorials/how-to-configure-ssl-tls-for-mysql-on-ubuntu-18-04

Hope this helps. Let me know if you have any questions.

Rregards,
Alex

by Justin Ellingwood
by Mark Drake
If you need to access your MySQL database from a remote location, it's important that you do so securely. This guide will demonstrate how to configure MySQL on Ubuntu 18.04 to accept remote connections with SSL/TLS encryption.
Submit an Answer