MySQL: can't disable SSL mode, SSL verification, SSL host verification.

[LukaszC86]

The parameters like "ssl_mode", "sslverify=false" in DATABASE_URL are simply ignored in version 1.65.1.

[github-actions]

Hello @LukaszC86, thanks for contributing to the Password Pusher community! We will respond as soon as possible.

[pglombardo]

Hi @LukaszC86 - the application uses the mysql2 gem for MySQL connectivity. ?ssl_mode=disabled should do it.

Here are the option docs:
https://github.com/brianmario/mysql2?tab=readme-ov-file#ssltls-options

If you get MySQL working with 1.65.1, please let us know. There has been some issues in the recent releases.

[LukaszC86]

Hi Peter,
unfortunately ssl_mode=disabled is not working, the SSL is enforced by the driver. I had to switch to sqlite3 to get pwpush working again.

[pglombardo]

I'm surprised but at the same time not too surprised. This is why we were forced to at least temporarily drop MySQL/MariaDB support in recent releases. Just constant random issues wherein other databases just work for years through upgrades, patches and config changes without issue.

[clmcavaney]

I think I'm hitting this too:

pwpusher  | ActiveRecord::ConnectionNotEstablished: TLS/SSL error: SSL is required, but the server does not support it (ActiveRecord::ConnectionNotEstablished)

but I have the DATABASE_URL env var as:

DATABASE_URL=mysql2://pwpusher:<redacted>@<redacted>:3306/pwpusher?ssl_mode=disabled

It's as though the options are being ignored.
Is this something wrong with the version of the mysql2 library (i.e. https://github.com/brianmario/mysql2) being used with PasswordPusher v1.65.1?

[pglombardo]

A few possible fixes might be:

1. Set the environment variable MARIADB_TLS_DISABLE_PEER_VERIFICATION=1
2. Add ssl_verify=false to DATABASE_URL in your docker-compose.yml

I believe this issue is caused by one of these mysql2 (the database adapter we use) reported issues:

brianmario/mysql2#1395
brianmario/mysql2#1379 (comment)
brianmario/mysql2#1421

[magaiverpr]

A few possible fixes might be:

1. Set the environment variable MARIADB_TLS_DISABLE_PEER_VERIFICATION=1
2. Add ssl_verify=false to DATABASE_URL in your docker-compose.yml

I believe this issue is caused by one of these mysql2 (the database adapter we use) reported issues:

brianmario/mysql2#1395 brianmario/mysql2#1379 (comment) brianmario/mysql2#1421

Can confirm that this worked.

Thanks!