Error backing up bbr-credhubdb with error message "SSL connection error: error:00000001:lib(0):func(0):reason(1) - exit code 1"

Products

• VMware Tanzu Application Service for VMs

Issue/Introduction

Customer is using AWS RDS as the external DB for their credhub database. The BBR is failing with below error:

ERROR - Error backing up bbr-credhubdb on backup_restore/XXX.
......
+ /var/vcap/jobs/database-backup-restorer/bin/backup --config /var/vcap/jobs/bbr-credhubdb/config/bbr.json --artifact-file /var/vcap/store/bbr-backup/bbr-credhubdb//credhubdb_dump

ERROR 2026 (HY000): SSL connection error: error:00000001:lib(0):func(0):reason(1)

Resolution

Make sure the certificate which is used when encrypting traffic to and from the database is properly configured in TAS->CredHub->Other external database->Database CA certificate. If you’re using Certificate authority (CA) rds-ca-2019 provided by Amazon RDS. To get a certificate bundle that contains both the intermediate and root certificates for an AWS Region, download it from the link for the AWS Region in the table from https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html#UsingWithRDS.SSL.RegionCertificates and configure them all in Database CA certificate box.