[MDEV-26731] Suddenly, started getting "ERROR 2026 (HY000): Unknown SSL error" Created: 2021-09-30 Updated: 2021-10-26 Resolved: 2021-10-26 |
|
| Status: | Closed |
| Project: | MariaDB Server |
| Component/s: | SSL |
| Affects Version/s: | None |
| Fix Version/s: | N/A |
| Type: | Bug | Priority: | Major |
| Reporter: | Nuno | Assignee: | Sergei Golubchik |
| Resolution: | Not a Bug | Votes: | 0 |
| Labels: | None | ||
| Description |
|
MariaDB instance on CentOS 7 has been running well for ages, and suddenly, starting about 30 minutes ago, my apps get this error trying to connect:
My certs have been always under "/etc/my.cnf.d/certs/", generated by LetsEncrypt. my.cnf:
Looking at the logs, there's nothing that hints anything. *How can I investigate the cause of this problem?* – UPDATE I wonder if this related, https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/ https://community.letsencrypt.org/t/help-thread-for-dst-root-ca-x3-expiration-september-2021/149190 > On September 30 2021, there will be a small change in how older browsers and devices trust Let’s Encrypt certificates. I wonder how can I make MariaDB trust ISRG Root X1! |
| Comments |
| Comment by Nuno [ 2021-09-30 ] |
|
Alright... for those who have the same problem, Run this if you haven't yet: `# yum update ca-certificates` If you get `No packages marked for update`, it may have been already run automatically - in my case, it was on Sep 24: And then run in your MySQL instance: `> FLUSH SSL;` This resolved my problem! |