MySQL support for mtls connection

[aguskwee]

Hi,

I just wondering if the current Janssen supports MTLS connection to MySQL db?

Regards,
Agus

[ossdhaval]

cc: @yurem

[yurem]

Janssen uses Connector/J JDBC driver. According to the documentation it's not supports MTLS.

But it works well with TLS. You can add additional properties to /etc/jans/conf/janssql.properties to use it:
connection.driver-property.useSSL=true
connection.driver-property.requireSSL=true
connection.driver-property.verifyServerCertificate=true
connection.driver-property.sslMode=VERIFY_CA
connection.driver-property.enabledTLSProtocols=TLSv1.3
...
connection.driver-property.ADDITIONAL_PROPERTY=ADDITIONAL_PROPERTY_VALUE

[aguskwee]

Yes, we can set those properties.

However, during the server startup, it seems that those extra parameters are not considered. See the attachment.

Regards,
Agus

[iromli]

This is part of Python code that the pod uses to connect to RDBMS during pod initialization. It's not the same as the one that used by Java-based Janssen components (e.g. auth-server). If the Java-based Janssen component supports TLS/mTLS, we can add feature into the Python code.

[yurem]

@iromli SQL ORM reads all properties with prefix connection.driver-property. and pass them to JDBC driver. Is this work in CN?

[iromli]

It should work.

[moabu]

Tested MTLS multiple times and it is supported.