Skip to content

Ghost can't start after AWS RDS CA update #213

Closed

Description

@mtdjr

I've updated Ghost's RDS database to use the new CA (old CA expires 3/5/2020) and Ghost is unable to make an SSL connection now.

We are using ghost:2.38. I've also tried with ghost:3 - same error.

[2020-02-18 19:34:05] ERROR unable to get local issuer certificate
 unable to get local issuer certificate
 "Unknown database error"
 Error ID:
    500
 Error Code: 
    HANDSHAKE_SSL_ERROR
 ----------------------------------------
 DatabaseError: unable to get local issuer certificate
    ...

Activity

  1. pascalandy commented on Feb 18, 2020

    @pascalandy
    Contributor

    Hi,
    I don't think the issue you are describing is related the this docker container image.

    To manage your expectations, you are in the docker project for Ghost. We don't support Ghost here, only the Ghost docker image itself.

    For any other questions, please take a look at: https://forum.ghost.org/

    Thanks!

  2. mtdjr commented on Feb 18, 2020

    @mtdjr
    Author

    @pascalandy I assumed it was an issue with the base image used, but it was a Ghost configuration issue. database__connection__ssl was set to Amazon RDS. Setting to true resolved the issue. Closing.

  3. Realvincentyuan commented on Jul 7, 2024

    @Realvincentyuan

    Have exactly the same issue when the CA of AWS RDS is updated to rds-ca-rsa2048-g1.

    Below config seems to not work for the SSL connection, any idea?

    "database": {
      "client": "mysql",
      "connection": {
        "host": "your_cloud_database",
        "port": 3306,
        "user": "your_database_user",
        "password": "your_database_password",
        "database": "your_database_name",
        "ssl": "Amazon RDS"
      }
    }
  4. locked and limited conversation to collaborators on Jul 8, 2024
  5. converted this issue into a discussion #423 on Jul 8, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions