sslv3 alert handshake failure

Question

I am receiving an SSL handshake failure error. I have an RDS MySQL instance running with CA rds-ca-ecc384-g1. In DMS I created an endpoint to this RDS instance. When checking the endpoint connection I am receiving this error. If RDS CA is rds-ca-2019 I am not facing this issue but that CA is gonna expire next year. I tried with certificate bundles from this  https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html#UsingWithRDS.SSL.RegionCertificates but still facing the issue. Unable to find any guide or question related to this online. Did anybody face this issue?

Accepted Answer

DMS cannot connect to the endpoint when the certificate "rds-ca-ecc384-g1" is being used with an RDS MySQL instance. Utilizing "rds-ca-rsa4096-g1" or "rds-ca-rsa2048-g1" is the suggested workaround. This is a known issue and DMS internal team is still working towards fixing this issue. There is no ETA for when the fix will be deployed.

sslv3 alert handshake failure

相關內容