Install with TLS 1.2 support

[rinorway]

How do you specify that the Espo should use TLS 1.2 for communicating with the mysql server during install ?

[rinorway]

Workaround : (in my case the database is an Azure endpoint) :

• Do clean install on non-TLS MySQL server
• Then switch on TLS
• Add this to data/config.php:
  

  database.sslCA = "/var/www/BaltimoreCyberTrustRoot.crt.pem" 

• Reload page, and log in.

Remarks:

• The PEM file is at https://www.digicert.com/CACerts/Bal...stRoot.crt.pem
• Tested with TLS 1.2, MySQL 8+
• Make sure your IP is in the allowlist in the database.
• If you use windows, you should set the path like "C:\\\\path\\\\BaltimoreCyberTrustRoot.crt.pem "

[rinorway]

small update : certificate has changed, see https://docs.microsoft.com/en-us/azu...icate-rotation