SSL Connection to MySQL Azure failing in Node.js application

Question

Following all of the documentation Microsoft provides for their new Azure MySQL product, I keep getting the same error

Error: 140736265921472:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:../deps/openssl/openssl/ssl/s23_clnt.c:794

I have tried this on a Linux docker container in case that I had an issue on macOS.

Example code, I have tried this isolated from my app to be sure:

var mysql = require('mysql2');

var conn = mysql.createConnection({
  host: "mydbname.mysql.database.azure.com",
  user: "user@mydbname",
  password: 'password',
  database: 'dbname',
  port: 3306,
  ssl: {
    ca: fs.readFileSync('./BaltimoreCyberTrustRoot.crt'),
  }
});

Documentation I followed:

https://learn.microsoft.com/en-us/azure/mysql/howto-configure-ssl https://learn.microsoft.com/en-us/azure/mysql/howto-connection-string

I have tried both mysql and mysql2 node drivers without success. Anyone solved this?

Did you install mysql2? npm install --save mysql2

lloiacono
– lloiacono

2017-05-15 12:59:56 +00:00
Commented May 15, 2017 at 12:59 — lloiacono
– lloiacono, Commented May 15, 2017 at 12:59
Yes I have mysql2 installed.

sjdweb
– sjdweb

2017-05-15 16:36:00 +00:00
Commented May 15, 2017 at 16:36 — sjdweb
– sjdweb, Commented May 15, 2017 at 16:36
I'm having the exact same issue on Windows. Node v6.10.3

Alex McKenzie
– Alex McKenzie

2017-05-15 20:10:49 +00:00
Commented May 15, 2017 at 20:10 — Alex McKenzie
– Alex McKenzie, Commented May 15, 2017 at 20:10

TwoCode · Accepted Answer · 2017-05-23 03:50:52Z

4

Thanks for reporting the issue. The bug had been exposed in our internal testings and fixed. We will deploy the fix these several days, and we'll keep you posted. At the mean time, please use non-ssl mode to mitigate if you could. Thanks!

-----Edit-----

Hi, the fix has been deployed. Please try out! Thanks.

edited May 23, 2017 at 3:50

answered May 16, 2017 at 6:40

TwoCode

1377 bronze badges

Sign up to request clarification or add additional context in comments.

6 Comments

Dave Over a year ago

Out of curiosity, what is the fix being implemented? The issues being discussed on github for mysql lib points that there's an issue with authentication switch (which means node can't connect with or w/o SSL). The PR to fix the switch won't fix the SSL issues. Was this because the cert issued wasn't setup for the mysql database domain? Because I noticed that also.

TwoCode Over a year ago

Hi Dave, there were two issues here. One was node client did not support authentication switch protocol; the other one was our service had a regression talking to node client over SSL connection. The regression was caused by capability flag was not recognized. Thanks for your interest!

sjdweb Over a year ago

Hi, with the same code I now get Error: unable to get local issuer certificate with both mysql and mysql2 latest drivers?

TwoCode Over a year ago

@sjdweb Can you try pem format root CA instead of crt? Another option is to set rejectUnauthorized: false to try to mitigate.

sjdweb Over a year ago

@TwoCode Hi, this has solved my issue. But after a few minutes in my app I see Error: read ECONNRESET at exports._errnoException (util.js:1050:11) at TLSWrap.onread (net.js:582:26) though? I saw this on a separate Stackoverflow here in the answer comments, the user still accepted the answer though: stackoverflow.com/questions/44210615/…

|

Collectives™ on Stack Overflow

SSL Connection to MySQL Azure failing in Node.js application

1 Answer 1

6 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

6 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related