Last Updated: 2015-06-01
Condition or Error
We have a new server dedicated to Zabbix monitoring. Zabbix uses an ODBC connection for MySQL. When we try to connect to a Tungsten connector from the new server using ODBC we receive an error:
[S1000][unixODBC][MySQL][ODBC 5.3(w) Driver]SSL connection error: unknown error number [ISQL]ERROR: Could not SQLConnect
Causes
The underlying cause is related to an SSL or encryption error, either the certificate is wrong, or the ciphers being used are not supported.
Examine the connector.log
on the Tungsten server we are connecting to returns an error
with each attempt:
INFO | jvm 1 | 2016/05/20 13:07:17 | WARN [MySQLProtocolHandler] - [172.16.0.120:43571] Error during transfer of authentication packet: no cipher suites in common
Connecting from to the new server using the mysql client may work:
[root@zabbix etc]# mysql -uzabbix -pZ@bbix487sql -hnas-db-ct01-a.safemls.net Welcome to the MariaDB monitor. Commands end with ; or \g. Your MySQL connection id is 40019 Server version: 5.6.20-68.0-log-tungsten Percona Server (GPL), Release 68.0, Revision 656
Connecting directly MySQL database on port 13306 using the ODBC connection may also work:
[root@zabbix etc]# isql -v ct01 +---------------------------------------+ | Connected! | | | | sql-statement | | help [tablename] | | quit | | | +---------------------------------------+
Rectifications
zabbix is trying to connect to the
connector with SSL encryption, but the SSL is not operating.
The easiest way to bypass this is disable SSL connections for
ODBC. Add the following entry in
odbc.ini (under the
section for the host you're testing):
useSSL = No