Pt-archiver to "Azure Database for MySQL servers" does not work if SSL is enabled

MySQL & MariaDB Other MySQL® Questions
,
1

After enabling SSL mode on MySQL Azure PaaS the connection fails with the following error:

DBI connect(‘test_percona;mysql_read_default_file=/root/PERCONA/ssl-ptachiver.conf;host=db********.mysql.database.azure.com;mysql_read_default_group=client’,‘userbackup@db********.mysql.database.azure.com’,…) failed: SSL connection error: Client is not configured to use SSL at ./pt-archiver line 2525.

I tried to configure the Azure CA certificate in my.cnf of the client, but I have the same error:

[client]

ssl = 1

ssl-mode = REQUIRED

user=userbackup

mysql_ssl=1

mysql_ssl_ca_file=/root/PERCONA/DigiCertGlobalRootG2.crt.pem

I can’t understand where I’m wrong, Thanks for the help…

1 Like
2

You need to specify the CA, Client Key, and Client Certificate in most cases.
Also, the parameters are ‘ssl_cert’, ‘ssl_key’, and ‘ssl_ca’
Check out this blog post too Percona Toolkit for MySQL with MySQL-SSL Connections

2 Likes