Re: Can't connect to MySQL without SSL

On 4. Aug 2026, at 23.25, dovecot--- via dovecot <[email protected]> wrote:
> I try to migrate from dovecot 2.3 to dovecot CE 2.4, but within a docker container. But I always get the following error from Dovecot CE:
> 
> Error: auth: mysql(host.docker.internal): Connect failed to database (foobar): TLS/SSL error: self-signed certificate in certificate chain - waiting for 1 seconds before retry
> 
> This is how I configured the mysql connection:
> 
> mysql host.docker.internal {
>  host = host.docker.internal
>  port = 3306
>  user = ...
>  password = ...
>  dbname = foobar
>  ssl = no
> }
> 
> So MySQL runs on the host machine directly, not in a container - therefore I'm using "host.docker.internal" as an host. But I don't need SQL encryption, since both MySQL and Dovecot run on the same machine. So why the heck does it look like, Dovecot is trying to connect using SSL?

Looks like mysql_ssl=no doesn't actually disable it, it just leaves it the default, which is "preferred". For now you can use:

  mysql host.docker.internal {
    ...
    option_file = /etc/dovecot/mysql-client.cnf
  }
  /etc/dovecot/mysql-client.cnf:
  [client]
  ssl-mode=DISABLED

I'll see about changing this in some way to be better.
_______________________________________________
dovecot mailing list -- [email protected]
To unsubscribe send an email to [email protected]