0%

Confluence数据库SSL警告

do what you loveeee

现象:

1
tail -f logs/catalina.out

image-20191126092908807
可以看到有很多报警信息:

1
Tue Nov 26 09:13:39 CST 2019 WARN: Establishing SSL connection without server's identity verification is not recommended. According to MySQL 5.5.45+, 5.6.26+ and 5.7.6+ requirements SSL connection must be established by default if explicit option isn't set. For compliance with existing applications not using SSL the verifyServerCertificate property is set to 'false'. You need either to explicitly disable SSL by setting useSSL=false, or set useSSL=true and provide truststore for server certificate verification.
1
警告:在没有SSL连接的情况下建立SSL连接不建议使用服务器的身份验证。根据MySQL5.5.45+、5.6.26+和5.7.6+要求必须建立SSL连接默认情况下,如果没有设置显式选项不使用SSL的应用程序将verifyServerCertificate属性设置为“false”。您需要通过设置useSSL=false显式禁用SSL,或设置useSSL=true,并为服务器证书提供信任存储验证

解决办法:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
# 1、进入confluence的data-home目录;
cd /data/vcg/confluence-home

# 2、备份配置文件
cp confluence.cfg.xml confluence.cfg.xml-bak191126

# 3、修改内容

vim confluence.cfg.xml

# 数据库连接后增加 ?useSSL=false
# 如下:
<property name="hibernate.connection.url">jdbc:mysql://rm-2zey0d751uapi749y35890.mysql.rds.aliyuncs.com:3306/confluence?useSSL=false</property>

# 4、重启confluence