Error creating an RDS Read replica when require_secure_transport is on

Question

I have a MySQL RDS database that has TLS turned on via require_secure_transport.  When I try to create a read replica off of it via the AWS console, it gets stuck at 'creating'

I connected to the database and ran 'show replica status' and saw

```
error connecting to master 'rdsrepladmin@###.###.###.###:3306' - retry-time: 60 retries: 1 message: Connections using insecure transport are prohibited while --require_secure_transport=ON.
```

is AWS not using TLS for replication?  How do I get my replication to use TLS?

Answer

Check [this official document](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/mysql_rds_set_external_master.html)! 
RDS MySQL supports a parameter for SSL that when set seems to be documented as being equivalent to `MASTER_SSL=1, MASTER_SSL_VERIFY_SERVER_CERT=0`.

###  ssl_encryption

A value that specifies whether Secure Socket Layer (SSL) encryption is used on the replication connection. 1 specifies to use SSL encryption, 0 specifies to not use encryption. The default is 0.

> The MASTER_SSL_VERIFY_SERVER_CERT option isn't supported. This option is set to 0, which means that the connection is encrypted, but the certificates aren't verified.

Error creating an RDS Read replica when require_secure_transport is on

ssl_encryption

相关内容