Home/ Questions/Q 4597702
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-21T23:17:40+00:00

We’ve got a client application that connects to our online MySQL database (5.1.44-community-log) thru

  • 0

We’ve got a client application that connects to our online MySQL database (5.1.44-community-log) thru a ODBC connector (the server is a managed* dedicated webserver). This works very nice. However I can’t get it to work using SSL. This is what I’ve done so far:

1. MySQL server

I’ve got the server manager* set up MySQL with SSL, this is ‘proven by’:

mysql> SHOW VARIABLES LIKE '%ssl%';

which results is this response:

+---------------+---------------------------------+
| Variable_name | Value                           |
+---------------+---------------------------------+
| have_openssl  | YES                             |
| have_ssl      | YES                             |
| ssl_ca        | /***/mysql-cert/ca-cert.pem     |
| ssl_capath    |                                 |
| ssl_cert      | /***/mysql-cert/server-cert.pem |
| ssl_cipher    |                                 |
| ssl_key       | /***/mysql-cert/server-key.pem  |
+---------------+---------------------------------+

Question: is the server configured right? I’m guessing it is…

2. Certificates

I’ve purchased real certificates (via my server manager). These are in the directory shown above. I’ve also downloaded the client-cert.pem, client-key.pem and ca-cert.pem from that directory.

3. MySQL user with REQUIRE [SSL|X509]

I’ve created a new user and then granted it access from any location (for testing) with SSL:

GRANT USAGE ON *.* TO 'somevaliduser'@'%' IDENTIFIED BY PASSWORD 'somevalidpass' REQUIRE X509

4. ODBC Client

I’ve (just downloaded and) installed : mysql-connector-odbc-5.1.8-winx64.msi (64-bit) as my machine is a 64-bit Windows 7 machine (so that’s not what’s wrong).

And I’ve created a User DSN configuring it like this (no options set on tabs), which shows it connecting to the server (however not using – nor requesting to do so – SSL) successfully (using some valid user which doesn’t requires SSL):

Connection to MySQL server without using SSL

So the connection is able to establish, now try using SSL.

This is configured like this, which is like I’ve read about on MySQL.com. So I’m not 100% sure the options set are right.

Connection to MySQL server using SSL

As you can see it results in a error HY000. Turning on tracing (within the ODBC configuration) also shows this error.

Can anyone give me a hint on how to make this work? Even if you know about just a part of the solution?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    I solved the problem. Because I tried several things at a time I don’t know what did the trick:

    1. I’ve had the server manager re-create the certificates: I bought some but I found out that those couldn’t be used to SSL-encrypt the connection. So for now I’m using OpenSSL certificates. I’ve had them re-create the certificates with 4) Create your client …. server. They must be unique. (as mentioned here) in mind.
    2. I guess the checkbox ‘Verify SSL Certificate’ only applies when you buy a certificate and a thrid party service should check the validity of the certificate. Uncheck that box!
    3. Only fill out the fields:
      • ‘SSL Key’ (c:\path_to\client-key.pem)
      • ‘SSL Certificate’ (c:\path_to\client-cert.pem)
      • ‘SSL Certificate Authority’ (c:\path_to\ca-cert.pem)

    Please note:

    1. The port is still the same (for me).
    2. The logs – as Michal Niklas proposed – didn’t show any usefull information.
    3. I’ve toggled on ‘Use compression’ which is said to improve performance.
    • 0