Return
-
Title
Database access disabled during 8.0 upgrade when using Secure Database Access -
Description
After the upgrade to 8.0, it is possible that external access to the SMA database may be disabled. The newest release of MariaDB (the SMA internal database) requires a different format for the self-signed certificate used to configure secure external access to the SMA database. If you configured secure external access to the SMA database with your own cert, secure external access to your database will NOT be affected. -
Cause
This situation was investigated under ID K1-19602 - MySQL self signed certificates are invalid due to a format change in the current MariaDB release. Though this was corrected by generating the certificate in the new format, it requires that the certificate is generated in version 8.0. -
Resolution
Create a new self-signed certificate in version 8.0 by selecting the Enable Secure database access (SSL) check box on the Security Settings page, and copy the new public key to any external connections.
To confirm the database access has been turned off as a result of this situation, please review the update log (Located Settings | Logs | Updates from the dropdown. From SystemUI if a Multi-ORG appliance):
Similar lines should exist during the 8.0 upgrade:
[Mon Nov 13 19:16:50 PST 2017] [notice] ***********************[Mon Nov 13 19:16:50 PST 2017] [notice] K1-19602: MySQL self signed certificates are invalid due to a format change in the current MariaDB release.[Mon Nov 13 19:16:50 PST 2017] [notice] External database access has been turned off.[Mon Nov 13 19:16:50 PST 2017] [notice] You can create a new self signed cert under the Security Settings page and copy the new public key to your external connections.[Mon Nov 13 19:16:50 PST 2017] [notice] ***********************
To re-enable Secure Database Access, please complete the following:
NOTE: In a Multi-ORG appliance, it is necessary to go to the SystemUI before following these steps.
- Go to Settings | Security Settings | Enable Database Access and check the box
- Check the box next to Enable secure database access
- Save
- Click on View CA Certificate to obtain certificate to use in external connections
-
Defect ID
K1-19602