SSL: Can't connect to server with windows client (#2026)

[Stefan Knippenberg]

Hi all,

I've read a lot about mySQL SSL issues in the last few days and still can't see why I can't get it to work in my environment.

First off, on Linux clients, it works - so it seems our system admin did his part right and installed SSL support and certificates correctly.

On Windows (Vista 64bit), it looks slightly different. When I try to connect without a certificate with a SSL-enabled user I'll get Access denied, which is correct. When I provide the certificate (--ssl-ca=...), all I seem to get is Err #2026 (SSL Connection error).

Things I tried so far:
1. changed certificate line feed to Windows format (CRLF instead of LF)
2. used different client software to connect through ssl: mysql command line client (5.0.45), SQLyof Enterprise (7.02), Connector/Net (5.1.6)
3. switching between using command line parameters and a my.cnf file
4. Using \\ instead of \ in file paths

I've read somewhere that providing the ca certificate would suffice and that client key and certificate would be optional. However, each working example I came across used these additional files to connect. Are they mandatory after all? With Linux, the CA certificate suffices...

Thanks in advance for any input - I'm pulling my hair out.

And on a sidenote - wouldn't it be nice to get a more meaningful error message? This could be virtually anything from invalid path over unreadable ca file to invalid password and missing ssl server support... Just to name a few.

Stefan