Hey all.. Is it plausible that an update in CBv5.7...
# docker-commandbox
c
Hey all.. Is it plausible that an update in CBv5.7.0 changes DB connections to assume the use of SSL?
b
I'm not sure what that means
c
Ok, we use the commandbox:latest Docker image, I assume that this now uses CB5.7.0? Any new app containers that have been created in the last 24 hours cannot connect to our AWS RDS db due to an SSL error. I had to add useSSL=false to the connection string to resolve the issue. I am trying to determine the cause (there were no code changes). The only change I can think of is the CB version update.. I guess I'm wondering if any update in 5.7.0 may have anything to do with it. The errors I saw were.
Copy code
Communications link failure

The last packet successfully received from the server was 4 milliseconds ago.
and [ERROR] runwar.context: Thu Dec 08 031235 UTC 2022 WARN: Establishing SSL connection without server's identity verification is not recommended. According to MySQL 5.5.45+, 5.6.26+ and 5.7.6+ requirements SSL connection must be established by default if explicit option isn't set.
b
To be clear, CommandBox isn't connecting to your DB server. Lucee or Adobe are, based on whatever version you've configured.
c
Agreed.. Since I don't know commandbox's inner workings, I am just wondering if there are any updated jars, or anything which may be different with 5.7..
I should also add im using Lucee 5.3.9.160
b
I don't think CommandBox could affect how your CF engine connects to a DB if it wanted to. It's more likey a Java version changed or your Lucee cfengine version itself changed
c
Thanks Brad.. I havent explicitly updated any Lucee or Java version for weeks, if not months... I'm struggling to figure out what changed.. anyway. Thanks again..
b
Even the jdbc extention may have changed versions, it's hard to say. People have been posting about needing that ssl arg for months, so it was probably inevitable.
c
Fair enough.. on another note.. Thanks for the fusionreactor package and server.json, it SO much easier than the using java args..
👍 1