Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TLS certificate error #144

Open
kqian-godaddy opened this issue Jan 3, 2025 · 1 comment
Open

TLS certificate error #144

kqian-godaddy opened this issue Jan 3, 2025 · 1 comment

Comments

@kqian-godaddy
Copy link

kqian-godaddy commented Jan 3, 2025

Hi,

I used this lib to connect to AWS RDS proxy. But i got error like:
x509: certificate signed by unknown authority

I'm doubting it's due to https://github.com/shogo82148/rdsmysql/blob/main/v2/certificate_gen.go. Do you have any idea?

@shogo82148
Copy link
Owner

I forgot to test AWS RDS Proxy...
RDS IAM authentication uses its own Root CA (https://github.com/shogo82148/rdsmysql/blob/67b44f184a5602e8a810a36ae5e177a24cefbfea/v2/certificate_gen.go), while AWS RDS Proxy uses certificates signed by ACM.

https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-proxy.howitworks.html#rds-proxy-security

RDS Proxy uses certificates from the AWS Certificate Manager (ACM). If you are using RDS Proxy, you don't need to download Amazon RDS certificates or update applications that use RDS Proxy connections.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants