# SSL on Percona Mysql **URL:** \ **Category:** Other MySQL® Questions\ **Created:** [November 17, 2015, 12:46am UTC](https://forums.percona.com/t/ssl-on-percona-mysql/4525 "2015-11-17T00:46:36Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![KunalM](https://avatars.discourse-cdn.com/v4/letter/k/9de053/32.png) [@KunalM](https://forums.percona.com/u/KunalM)\ **Post date:** [November 17, 2015, 12:46am UTC](https://forums.percona.com/t/ssl-on-percona-mysql/4525/1 "2015-11-17T00:46:36Z")
Hello Team, I having issue connecting MySQL over SSL and I am getting below error. Can someone assist ? [root@crm-app mysql-ssl]# mysql --ssl-ca=/etc/mysql-ssl/ca-cert.pem --ssl-cert=/etc/mysql-ssl/client-cert.pem --ssl-key=/etc/mysql-ssl/client-key.pem -hEC-VMA.modeldns.com.au -uecuser\_appusr -p Enter password: ERROR 2026 (HY000): SSL connection error: error:00000001:lib(0):func(0):reason(1) [root@crm-app mysql-ssl]# NOTE: ec-vma.modeldns.com.au (Master) and crm-app is a client. # === [root@crm-app ~]# cat /etc/my.cnf [mysqld] innodb\_file\_per\_table=1 [client] ssl-ca=/etc/mysql-ssl/ca-cert.pem ssl-cert=/etc/mysql-ssl/client-cert.pem ssl-key=/etc/mysql-ssl/client-key.pem You have new mail in /var/spool/mail/root [root@crm-app ~]# [root@crm-app ~]# [root@crm-app ~]# [root@crm-app ~]# cd /etc/mysql-ssl/ [root@crm-app mysql-ssl]# ll -sh total 16K 4.0K -rw-r–r-- 1 root root 1.2K Nov 4 23:33 ca-cert.pem 4.0K -rw-r–r-- 1 root root 1.3K Nov 4 23:23 ca-cert.pem.s 4.0K -rw-r–r-- 1 root root 1.2K Nov 4 23:23 client-cert.pem 4.0K -rw-r–r-- 1 root root 1.7K Nov 4 23:24 client-key.pem 0 -rw-r–r-- 1 root root 0 Nov 4 23:20 server-cert.pem [root@crm-app mysql-ssl]# REF:[http://xmodulo.com/enable-ssl-mysql-server-client.html](http://xmodulo.com/enable-ssl-mysql-server-client.html) -Regards Kunal Modi ---
**Author:** ![jrivera](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/jrivera/32/13_2.png) [@jrivera](https://forums.percona.com/u/jrivera)\ **Post date:** [November 18, 2015, 3:00am UTC](https://forums.percona.com/t/ssl-on-percona-mysql/4525/2 "2015-11-18T03:00:17Z")
If you have latest OpenSSL version installed you need to upgrade to at least 5.5.45 or 5.6.26 which has a fix for the bug [url][MySQL Bugs: #77275: Newest RHEL/CentOS openssl update breaks mysql DHE ciphers](https://bugs.mysql.com/bug.php?id=77275%5B/url%5D) Second, make sure the Common Name value used for the server and client certificates/keys must each differ from the Common Name value used for the CA certificate. Follow this link to create SSL certificates/keys [url][http://dev.mysql.com/doc/refman/5.6/en/creating-ssl-files-using-openssl.html[/url]](http://dev.mysql.com/doc/refman/5.6/en/creating-ssl-files-using-openssl.html%5B/url%5D) ---
**Author:** ![KunalM](https://avatars.discourse-cdn.com/v4/letter/k/9de053/32.png) [@KunalM](https://forums.percona.com/u/KunalM)\ **Post date:** [November 20, 2015, 6:56am UTC](https://forums.percona.com/t/ssl-on-percona-mysql/4525/3 "2015-11-20T06:56:34Z")
Thanks for your suggestion. I have tired upgrading Percona server to latest 5.6.27 but issue persist. Not sure where is actual issue. Same certificate is working for other servers which are not percona mysql server ( So I dont think issue Common Name value ) Do we have any other suggestion. -Regards Kunal Modi ---
**Author:** ![KunalM](https://avatars.discourse-cdn.com/v4/letter/k/9de053/32.png) [@KunalM](https://forums.percona.com/u/KunalM)\ **Post date:** [November 23, 2015, 10:54pm UTC](https://forums.percona.com/t/ssl-on-percona-mysql/4525/4 "2015-11-23T22:54:40Z")
Hello Team Can someone please assist. It will be of great help. -Regards Kunal Modi