Getting 'Establishing SSL connection without server's identity verification is not recommended' warning messages in the logs
プラットフォームについて: Server および Data Center のみ。この記事は、Server および Data Center プラットフォームのアトラシアン製品にのみ適用されます。
Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Fisheye および Crucible は除く
問題
Confluence logs is flooded with the following messages:
WARN: Establishing SSL connection without server's identity verification is not recommended. According to MySQL 5.5.45+, 5.6.26+ and 5.7.6+ requirements SSL connection must be established by default if explicit option isn't set. For compliance with existing applications not using SSL the verifyServerCertificate property is set to 'false'. You need either to explicitly disable SSL by setting useSSL=false, or set useSSL=true and provide truststore for server certificate verification.診断
Confluence is connected to MySQL 5.5+ and the connection string doesn't have the parameter describing usage of SSL defined.
原因
This is warning coming from newer versions of MySQL.
ソリューション
Ensure that we explicitly specify to disable or enable SSL usage.
- Confluence をシャットダウンします。
Backup confluence.cfg.xmllocated in<confluence_home>confluence.cfg.xmlを編集します。Look for the database connection string similar to the following:
<property name="hibernate.connection.url">jdbc:mysql://<database-IP>/<databasename></property>Ensure that we have specified usage of SSL.
DISABLE - for example, this is to explicitly specify not to use SSL:
<property name="hibernate.connection.url">jdbc:mysql://<database-IP>/<databasename>?useSSL=false</property>ENABLE - for example, this is to explicitly specify to use SSL:
<property name="hibernate.connection.url">jdbc:mysql://<database-IP>/<databasename>?useSSL=true</property>In addition, you must set up certificates and configure the truststore: https://dev.mysql.com/doc/connector-j/8.0/en/connector-j-reference-using-ssl.html
- Confluence を再起動します。