Connecting to Amazon RDS with SSL

jbones78 posted 2 months ago in Creating a connection

Having issues with connecting to an Amazon RDS Aurora 5.7 compatible database. SSL is forced for every connection (as it should be). Connecting via the command line works fine:

*****@*****-laptop:~$ mysql -h *********.us-east-1.rds.amazonaws.com -u ********** -p
Enter password: 
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 64923
Server version: 5.7.12 MySQL Community Server (GPL)

Copyright (c) 2000, 2018, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql> SHOW SESSION STATUS LIKE 'Ssl_cipher';
+---------------+--------------------+
| Variable_name | Value              |
+---------------+--------------------+
| Ssl_cipher    | DHE-RSA-AES256-SHA |
+---------------+--------------------+
1 row in set (0.35 sec)

It looks as though SSL is handled automatically by the mysql client but Heidi SQL doesn't. I've tried downloading the public key (docs.aws.amazon. com/AmazonRDS/latest/UserGuide/AuroraMySQL.Security.html) and using that as the 'SSL CA certificate' and/or 'SSL certificate' fields in Heidi SQL, however, I get the error:

SSL connection error: unknown error number

Any help would be greatly appreciated.

pablo987 posted 2 weeks ago

Yes, I have seen that after adding the SSL certificate on our website we faced many issues. Like the issue, you have shared. But still, we have to add this certificate on our website. Otherwise, you will also face the same punishment as me which I have to face with my website. It was demoted by Google until I haven't added the SSL certificate.

Please login to leave a reply, or register at first.