Question

SSL connection error: Unable to get certificate

Posted June 18, 2017 5.9k views
MySQL

Hi,

I’m getting this error: SSL connection error: Unable to get certificate

How can I solve this?

Thanks so much,
Maarten

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

1 answer

Hello @raaijmakersmaarten,

Since the SSL certificates directory is owned by group ssl-private and since mysqld-safe runs as mysqlgroup, Linux won’t allow reading the private key. With dkim I successfully forced the program to run as a different group by editing the init script.

Solution:

Make a copy of the certificates/keys directory and chown to mysql:mysql. Requires to synchronize the copies of the keys at every renewal. Perfectly scalable across applications and number of servers (suppose the same certificate is used by other apps too, for example Postfix) as soon as one updates the certificates with a script or a checklist (so you won’t forget to copy certificates to a certain app)

If you found this useful please upvote or mark this as the right answer!

Happy coding!

Submit an Answer