Unable to upgrade the CA API Gateway database with 10.1 in aws

Products

• CA API Gateway

Issue/Introduction

We are running aws, rds, mysql 8.0.25

We are selecting

2) Display CA API Gateway configuration menu

1) Upgrade the CA API Gateway database in the menu with the output:

Unable to determine database version (incorrect credentials?), cannot upgrade.

Environment

Release : 10.1

Component : API GATEWAY

Cause

Customer's RDS mysql is configured to accept only SSL connections.  The gateway can be configured for SSL, however the update of the DB though the SSGCONFIG Menu use upgrade.jar, this does not make SSL connection 

Results in mysql log 

2021-09-28T15:15:25.708304Z 397638 Connect gateway@ip on ssg using TCP/IP

2021-09-28T15:15:25.708335Z 397638 Connect Access denied for user 'gateway'@'ip' (using password: YES)

 

 

Resolution

This is a known issue it only occurs when doing the DB update from SSGCONFIG MENU if mysql has been setup to only accept SSL 

What's been provided is to remove the extra setting (require_secure_transport=ON) for mysql my.cnf or property in mysql RDS

This will allow all traffic to still communicate SSL but also allow SSG DB update on non-ssl

To fix this defect DE334084 has been filed, it requires changes to upgrade.jar it’s marked low priority