Hello @DigitalKrate

From the networking side of things, it all looks correct to me. I think that the problem is with the MySQL user itself or Wordpress.

So just to confirm, are you able from your Webserver to connect to the MySQL server directly with:

mysql -u non_root_user -p -h 10.2.2.2

If this works for you then the user should be fine and the problem is with the Wordpress config. In this case, I think that you should just add this to your wp-config.php file:

define('DB_SSL', true);

If you are not able to connect to the MySQL server from the command line, then it is most likely the non-root-user that you’ve created.

I would suggest starring fresh by dropping all of the entries for the non-root-user and then re-creating it again. To check this just run this command as root:

SELECT user,host,password FROM mysql.user;

Then drop all of the entries, for exmaple:

DROP User 'non_root_user'@'localhost';
DROP User 'non_root_user'@'10.1.1.1';
...

Then re-create the user again:

CREATE USER 'non_root_user'@'10.1.1.1' IDENTIFIED BY 'password' REQUIRE X509;
GRANT ALL PRIVILEGES ON wp_db.* TO 'non_root_user'@'10.1.1.1';

Let me know how it goes!
Regards,
Bobby

Hey @bobbyiliev

Thanks for the detailed response,

So just to confirm, are you able from your Webserver to connect to the MySQL server directly with:

Yes, this works fine and I can run queries etc.

If this works for you then the user should be fine and the problem is with the Wordpress config. In this case, I think that you should just add this to your wp-config.php file:

I have tried adding define('DB_SSL', true);
I have also tried including define('MYSQL_CLIENT_FLAGS', MYSQLI_CLIENT_SSL);

Both have not worked so far.

I would suggest starring fresh by dropping all of the entries for the non-root-user and then re-creating it again. To check this just run this command as root:

I have not yet tried fully removing the user, I have attempted password changes / resets etc. but will try complete removal to see if that helps.

Thanks again @bobbyiliev for the response.

Hooray.....

So I have pinpointed the issue, now looking to find a viable solution.

So Wordpress’s DB class (Need to check if its the most current version) does not listen for the DB_SSL constant and looking at the wp-db.php file, its clear the database class does not support the SSL connection either currently.

As soon as i disabled the need for the SSL DB connection its all working, so need to find a robust solution to the lack of DB_SSL connection availability in the version of Wordpress I am using and look to upgrade it if not already latest. First thing will be to check the current installed version of WP clearly and upgrade respectively.

I have come across this blog post on the topic but need to review the code first: https://blog.slowb.ro/enable-ssl-database-connections-for-your-wordpress-installation/