Has anyone connected to CloudSQL-MySQL using SSL certs?

[kenyee]

The quarkus docs cover username/password mode: https://quarkus.io/guides/deploying-to-google-cloud#using-cloud-sql-with-a-jdbc-driver

but we're using this way of connecting w/ special SSL certs: https://cloud.google.com/sql/docs/mysql/connect-admin-ip#connect-ssl
And I don't see a way to change the JDBC config to do this in Quarkus or via the CloudSQL Java Connector...

[kenyee]

FYI, you use this:
quarkus.datasource.jdbc.additional-jdbc-properties.serverRSAPublicKeyFile=/path/to/server_ca.pem

Now hitting this cryptic error:

2022-03-10 14:43:54,886 ERROR [io.qua.run.Application] (main) Failed to start application (with profile stg): java.lang.NullPointerException
	at com.mysql.cj.jdbc.ConnectionImpl.connectOneTryOnly(ConnectionImpl.java:973)
	at com.mysql.cj.jdbc.ConnectionImpl.createNewIO(ConnectionImpl.java:819)
	at com.mysql.cj.jdbc.ConnectionImpl.<init>(ConnectionImpl.java:449)
	at com.mysql.cj.jdbc.ConnectionImpl.getInstance(ConnectionImpl.java:242)
	at com.mysql.cj.jdbc.NonRegisteringDriver.connect(NonRegisteringDriver.java:198)
	at io.agroal.pool.ConnectionFactory.createConnection(ConnectionFactory.java:210)
	at io.agroal.pool.ConnectionPool$CreateConnectionTask.call(ConnectionPool.java:513)
	at io.agroal.pool.ConnectionPool$CreateConnectionTask.call(ConnectionPool.java:494)

using this in application.properties:

%stg.quarkus.datasource.db-kind=other
%stg.quarkus.datasource.jdbc.url=jdbc:mysql:///myproj_db_stg
%stg.quarkus.datasource.jdbc.driver=com.mysql.cj.jdbc.Driver
%stg.quarkus.datasource.username=${tss.cloudsql.username}
%stg.quarkus.datasource.password=${tss.cloudsql.password}
%stg.quarkus.datasource.jdbc.additional-jdbc-properties.cloudSqlInstance=myproj-stg:us-central1:myproj-regional-primary
%stg.quarkus.datasource.jdbc.additional-jdbc-properties.socketFactory=com.google.cloud.sql.mysql.SocketFactory 
%stg.quarkus.datasource.jdbc.additional-jdbc-properties.serverRSAPublicKeyFile=/path/to/file

[kenyee]

FYI, these two lines were not required:

%stg.quarkus.datasource.jdbc.additional-jdbc-properties.cloudSqlInstance=myproj-stg:us-central1:myproj-regional-primary
%stg.quarkus.datasource.jdbc.additional-jdbc-properties.socketFactory=com.google.cloud.sql.mysql.SocketFactory

Also had to set db-kind to mysql:
%stg.quarkus.datasource.db-kind=mysql
And also the URL needed our internal IP address to reach it:
%stg.quarkus.datasource.jdbc.url=jdbc:mysql://<internal_ip_to_cloudsql>/myproj_db_stg

Because it's using the serverPublicKey, it's just a regular mysql connection but SSL encrypted so no need for the socket connector...