# MySQL 8 replication via non-ssl connection

**URL:** <https://forums.percona.com/t/mysql-8-replication-via-non-ssl-connection/14816>\
**Category:** Percona Server for MySQL 8.0\
**Tags:** mysql, percona\
**Created:** [March 20, 2022, 4:18pm UTC](https://forums.percona.com/t/mysql-8-replication-via-non-ssl-connection/14816 "2022-03-20T16:18:01Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Valdemaras\_Pipiras](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/valdemaras_pipiras/32/6086_2.png) [@Valdemaras\_Pipiras](https://forums.percona.com/u/Valdemaras_Pipiras)\
**Post date:** [March 20, 2022, 4:18pm UTC](https://forums.percona.com/t/mysql-8-replication-via-non-ssl-connection/14816/1 "2022-03-20T16:18:01Z")

</div>

I’m trying to setup tiny master-slave environment with percona-server-server.x86\_64-8.0.27-18.1.el8.

A plan is **to use non-ssl connections between the nodes** as the servers will communicate in the LAN only. But following error is received on slaves:

> error connecting to master ‘replica@192.168.3.100:3306’ - retry-time: 60 retries: 3 message: SSL connection error: SSL is required but the server doesn’t support it

Latest mysql.cnf on both nodes:

```auto
[mysqld]

port = 3306
bind-address = 0.0.0.0
datadir = /var/lib/mysql
socket = /var/run/mysql/mysql.sock
pid-file = /var/run/mysql/mysql.pid
tmpdir = /var/tmp/mysql
# User is ignored when systemd is used (fedora >= 15).
user = mysql
# adding this to allow replication w/o ssl
default_authentication_plugin = mysql_native_password
# disable ssl
tls-version = invalid
require_secure_transport = 0

##
# Logging configuration.
##
log-error = /var/log/mysql/mysqld.err

##
# Replication
##
server-id = 1
report_host = hv3-db1
gtid_mode = on
enforce-gtid-consistency = on
sync_binlog = 1
log_bin = /var/lib/mysql/mysql-bin
log_bin_index = /var/lib/mysql/mysql-bin.index
binlog_expire_logs_seconds = 864000
max_binlog_size = 100M
log_replica_updates = 1

##
# Memory settings.
##
key_buffer_size = 256M
max_allowed_packet = 128M
table_open_cache = 256
sort_buffer_size = 1M
read_buffer_size = 1M
read_rnd_buffer_size = 4M
myisam_sort_buffer_size = 64M
thread_cache_size = 8
max_connections = 151
tmp_table_size = 64M
max_heap_table_size = 64M
join_buffer_size = 3M

##
# Other settings.
##
wait_timeout = 1800
# Disabling symbolic-links is recommended to prevent assorted security risks
skip-symbolic-links = 1
net_read_timeout = 120
skip-name-resolve
back_log = 100
max_connect_errors = 10000
open-files-limit = 20000
interactive_timeout = 3600
connect_timeout = 120
explicit_defaults_for_timestamp = True

##
# InnoDB settings
##
innodb_buffer_pool_size = 50G
innodb_log_buffer_size = 1M
innodb_flush_method = O_DIRECT
innodb_file_per_table = 1
innodb_flush_log_at_trx_commit = 2
innodb_lock_wait_timeout = 600
innodb_adaptive_hash_index = off
innodb_fill_factor = 50
innodb_log_file_size = 2G
# Move logs on separate directory/partition
innodb_undo_directory = /var/tmp/mysql
innodb_log_group_home_dir = /var/tmp/mysql

```

Replica is started with following command:

`CHANGE REPLICATION SOURCE TO SOURCE_HOST = '192.168.3.100', SOURCE_PORT = 3306, SOURCE_USER = 'replica', SOURCE_PASSWORD = 'xxx', SOURCE_AUTO_POSITION = 1, SOURCE_SSL=0;`

Have you an idea how to fix the issue?

---

<div class="post-metadata">

**Author:** ![Ivan\_Groenewold](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/ivan_groenewold/32/6299_2.png) [@Ivan\_Groenewold](https://forums.percona.com/u/Ivan_Groenewold)\
**Post date:** [March 21, 2022, 2:09pm UTC](https://forums.percona.com/t/mysql-8-replication-via-non-ssl-connection/14816/2 "2022-03-21T14:09:57Z")

</div>

Hello, can you check the definition of replica user in the source server? did you create it with “require SSL” ?