Hi,

I'd say that the problem is with mysqld using a different CA certificate
from the one specified by the ssl-ca option. I doubt it's the
letsencrypt certificate the one being used, correct me if I'm wrong (y
can check with e.g. `openssl c_client`).

Could you please:

1. share the ssl config snippet from mysql.cnf?

2. confirm that you don't need the client part to reproduce the problem,
as the "CA is self-signed" message is a mysqld log message that is
printed before any connection attempt? This is mostly to verify that I
correctly understood the problem.

3. Set ssl-capath to /etc/ssl/lets_encrypt/ and see if it behaves
differently?

Please change the report status back to New after commenting back.
Thanks!

** Changed in: mysql-8.0 (Ubuntu)
       Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1890611

Title:
  Client cannot connect to remote mysql-server when the latter is
  configured with ssl parameters using a public CA

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mysql-8.0/+bug/1890611/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to