We are not able to connect rds mysql after upgrading from mysql 5.7 to 8.0.34

Question

We are not able to connect rds mysql after upgrading from mysql 5.7 to 8.0.34
Receiving below error message.
System.Security.Authentication.AuthenticationException
A call to SSPI failed, see inner exception.
Stack Trace:
   at MySql.Data.Common.Ssl.StartSSL(Stream& baseStream, Encoding encoding, String connectionString)
   at MySql.Data.MySqlClient.NativeDriver.Open()
   at MySql.Data.MySqlClient.Driver.Open()
   at MySql.Data.MySqlClient.Driver.Create(MySqlConnectionStringBuilder settings)
   at MySql.Data.MySqlClient.MySqlConnection.Open()
   at Quest.Toad.MySQL.MySQLConnection.OpenInitialTestConnection()
   at Quest.Toad.MySQL.MySQLConnection.DoBeforeConnect()
   at Quest.Toad.Db.Connection.Connect(Boolean notify)
   at Quest.Toad.Db.Provider.BackgroundConnector.CreateBackgroundConnection()

System.ComponentModel.Win32Exception
    The message received was unexpected or badly formatted

Answer

Hi Trace,

The most likely culprits are:

**TLS Version Changes**: MySQL 8.0 has introduced changes in the default TLS protocol. If your client doesn't support the newer versions of TLS protocols, you will encounter issues. I had problems with older .NET plugins.

**Authentication Plugin Change**: MySQL 8.0 uses caching_sha2_password as the default authentication plugin. Older clients might not be compatible with this newer authentication method, leading to connection issues.

Answer

Hi,

It looks like during the update you also switched to the new Certificate Authority and need to make changes on your application side.
Please follow the documentation https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/ssl-certificate-rotation-mysql.html

We are not able to connect rds mysql after upgrading from mysql 5.7 to 8.0.34

Relevant content