MySql TLS version wannings

[Anupkum]

Hello,

MySql server is showing following wannings.

A deprecated TLS version TLSv1 is enabled. Please use TLSv1.2 or higher.
CA certificate ca.pem is self signed.

I checked for updates and it is stating mysqld 5.7.40 and saying all packages are updated.

Please help me fix this issue...

 

[GoWilkes]

This might help:

MySQL :: MySQL 5.7 Reference Manual :: 6.3.2 Encrypted Connection TLS Protocols and Ciphers

dev.mysql.com

If I'm reading correctly, installing OpenSSL 1.1.1 would automagically fix it.

 

[cPanelWilliam]

Hi! When you run the following command as root, does MySQL show that support for TLSv1 is enabled?

mysql -e "SHOW GLOBAL VARIABLES LIKE 'tls_version';"

If so, you can force MySQL to use only TLS 1.2 and 1.3 by adding the following to the end of /etc/my.cnf, then restarting the service:

[mysqld]

tls_version=TLSv1.2,TLSv1.3

 

[Anupkum]

Hi William,
thanks for your reply. It worked for me to fix TLS version issue.

However CA certificate ca.pem is self signed error is still there.

Kindly help me fix this.

 

[cPanelWilliam]

Hi,

However CA certificate ca.pem is self signed error is still there.

Kindly help me fix this.

Can you try following the steps from the following documentation? I believe it should resolve this warning:

https://docs.cpanel.net/knowledge-base/security/how-to-configure-mysql-ssl-connections/