Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

mySQL requires SSL connection by default

Description

Lucee admin needs the functionailty to set useSSL to false for mySQL connections.

IYou can create the database connection in Lucee, but it won't verify and you can't connect to the database via DSN unless you create a connection string in application.cfc.

Error in lucee-stderr.log

Mon Jul 30 21:25:27 EDT 2018 WARN: Establishing SSL connection without server's identity verification is not recommended. According to MySQL 5.5.45+, 5.6.26+ and 5.7.6+ requirements SSL connection must be established by default if explicit option isn't set. For compliance with existing applications not using SSL the verifyServerCertificate property is set to 'false'. You need either to explicitly disable SSL by setting useSSL=false, or set useSSL=true and provide truststore for server certificate verification.

Activity

Show:

Wilfried Wacker 6 August 2018 at 16:01

Hallo,
i have the same Problem, but the workarround dont work.
Can you help me? the logfile ist more then 15GB in 2 days an makes the Server very slowly
the entry Looks like:

<data-source allow="511" blob="false" class="com.mysql.cj.jdbc.Driver" clob="false" connectionLimit="100" connectionTimeout="1" custom="useUnicode=true&amp;characterEncoding=UTF-8&amp;jdbcCompliantTruncation=false&amp;allowMultiQueries=true&amp;useLegacyDatetimeCode=true" database="IMEH" dbdriver="MySQL" dsn="jdbc:mysql://{host}:{port}/{database}" host="localhost" id="mysql" metaCacheTimeout="60000" name="imeh" param-delimiter="&amp;" param-leading-delimiter="?" param-separator="=" password="encrypted:xxxxxxx" port="3306" storage="false" username="xxxx" validate="false" useSSL="false"/>

in the logile appears:
Mon Aug 06 18:00:14 CEST 2018 WARN: Establishing SSL connection without server's identity verification is not recommended. According to MySQL 5.5.45+, 5.6.26+ and 5.7.6+ requirements SSL connection must be established by default if explicit option isn't set. For compliance with existing applications not using SSL the verifyServerCertificate property is set to 'false'. You need either to explicitly disable SSL by setting useSSL=false, or set useSSL=true and provide truststore for server certificate verification.

thanks.

Pothys - MitrahSoft 31 July 2018 at 12:28

Yes, Lucee admin doesn't have control for enable/disable SSL permission. If you want to add them in datasource you can find your datasource in xml and add useSSL=true&requireSSL=true in datasource tag & restart the lucee. It's work fine.

After confirmation we may add the support in lucee admin

Details

Assignee

Reporter

Labels

New Issue warning screen

Before you create a new Issue, please post to the mailing list first https://dev.lucee.org

Once the issue has been verified, one of the Lucee team will ask you to file an issue

Priority

Created 31 July 2018 at 01:48
Updated 7 August 2018 at 13:24

Flag notifications