Home / server / Questions / 1090043
In Process
oucil
Asked: 2022-01-15 06:57:28 +0800 CST

'--ssl=off' Error in Mysql 8.0.26 service startup

  • 772

I'm seeing an odd error in the mysqld.service status notes...

The syntax '--ssl=off' is deprecated and will be removed in a future release. Please use --tls-version=invalid instead.

The thing is I've disabled SSL using skip_ssl in the /etc/my.cnf and I don't see any vars relating to SSL defined in /etc/my.cnf.d/*. I've also checked in /etc/systemd/system/mysqld.service.d/override.conf and the only thing I've set is LimitNOFILE.

The --ssl=off setting is a command line start up variable, so where could this error be coming from? Is there a new way to disable SSL other than skip_ssl?

I'm on Rockly Linux 8, and MySQL 8.0.26.

The pertaining documentation, including the deprecation note can be found here: https://dev.mysql.com/doc/refman/8.0/en/server-options.html

mysql systemd mysql8

1 Answers

  1. I found in the docs finally that the skip_ssl is actually the same variable in cnf format that --ssl is in command line, so it was the error message ambiguity that led to my confusion.

    The fix for this is to replace skip_ssl with tls_version='' as the former is now deprecated as of MySQL 8.0.26.

    This has led to a number of new ssl related errors in the status so I'll post any notes I can after I solve them, hopefully this helps alleviate any confusion and saves you some time.

    With regard to the new errors when using tls_version=''...

    [Warning] ... [Server] Failed to initialize TLS for channel: mysql_main. See below for the description of exact issue.
[Warning] ... [Server] Failed to set up SSL because of the following SSL library error: TLS version is invalid
[Warning] ... [Server] Plugin mysqlx reported: 'Failed at SSL configuration: "SSL context is not usable without certificate and private key"'

    There is an open bug report at oracle outlining this behaviour, which I've added my voice to.

    • 2