This article will discuss the ways in which this issue may manifest. The log entry below will be seen in the SSG log file repeatedly. It is present to remind administrators to use certificate validation whenever possible if SSL is used in the connection.
WARNING 77 STDERR: Fri Oct 11 08:17:00 CEST 2019 WARN: Establishing SSL connection without server's identity verification is not recommended. According to MySQL 5.5.45+, 5.6.26+ and 5.7.6+ requirements SSL connection must be established by default if explicit option isn't set. For compliance with existing applications not using SSL the verifyServerCertificate property is set to 'false'. You need either to explicitly disable SSL by setting useSSL=false, or set useSSL=true and provide truststore for server certificate verification.
This article applies to all supported versions of API Gateway.
This can be caused by a Gateway that is configured in some way for MySQL SSL connections when certificate verification is not enabled.
To resolve this issue, it will be either (or both) of the items below:
If SSG MySQL connections are SSL-enabled:
If a JDBC MySQL connection (localhost) is SSL-enabled:
At the end of either step, be sure to restart the SSG service with the following command on each node in the cluster: service ssg restart