[Kea-users] MySQL / TLS Server Validation

[Elton, Norman N]

Posting for awareness …

It appears that newer versions of the Kea docker container are built against newer versions of libmariadb. According to ChatGPT, the MariaDB Connector library now performs TLS server certificate validation by default. If your MySQL server does not support TLS (as verified by SHOW VARIABLES LIKE ‘has_ssl’), Kea will refuse to start with the error:

TLS/SSL error: SSL is required, but the server does not support it

The workaround appears to be to start Kea with an environment variable:

MARIADB_TLS_DISABLE_PEER_VERIFICATION=1

Not sure if there is a Kea configuration knob to do the same? I couldn’t find one.

Thanks!

Norman
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/kea-users/attachments/20261014/3a8cdfbd/attachment-0001.htm>