Mariadb access to galera cluster over tls

[Sud]

Hello suitecrm community.

We have deployed several instances of SuiteCRM 8.3 and have tried to get a TLS connection working from SuiteCRM to a MariaDB Galera cluster. The cluster is running MariaDB 10.11 LTS and is configured with TLS 1.2

We have followed the steps in a previous discussion linked below.

SSL/TLS DB Connection

SSL/TLS Database MySQL MariaDB Connection I wish there were an option for installation or through the config file to allow secure database connections. As I was searching around, I was able to find a solution. This edit will alter some core files, so it is NOT upgrade safe. I will explain how the secure database connection is done and then how it is reflected through a connection with SuiteCRM. THE DB KEYCHAIN I found this great tutorial on how to allow secure DB connections and create the …

We generated a client TLS certificate and key and set permissions for the ca, client cert and client key to 644 and changed ownership to www-data:www-data

The CRM prod.log file has entries showing the database connection is failing despite using the correct credentials.

request.CRITICAL: Uncaught PHP Exception Doctrine\DBAL\Exception\ConnectionException: “An exception occurred in driver: SQLSTATE[HY000] [1045] Access denied for user ‘myuser’@‘mydbhost’ (using password: YES)” at /var/www/html/vendor/doctrine/dbal/lib/Doctrine/DBAL/Driver/AbstractMySQLDriver.php line 112

Has anyone in the community gotten database connections to work using TLS? Are we missing some additional configuration steps ?

Cheers.

Sud.