Unable to connect to mysql using ssl

[mshober]

I discovered that connections to mysql fail when using a database user that requires ssl, even if the connection info in Glue specifies that ssl is required and supplies a relevant certificate.

The expected behavior would be for wrangler to pass any ssl properties from the Glue connection to pymsql when establishing the connection, but that does not appear to be happening.

To Reproduce (Using environment from cloudformation)

# Connect using master user which by default doesn't require ssl
con = wr.mysql.connect("aws-data-wrangler-mysql")
assert con.ssl is False

# Require SSL and attempt to reconnect
con.cursor().execute("ALTER USER 'test'@'%' REQUIRE SSL")
con = wr.mysql.connect("aws-data-wrangler-mysql")  # fails

Error Output:

pymysql.err.OperationalError: (1045, "Access denied for user 'test'@'<ip-address>' (using password: YES)")

awswrangler: 2.4.0

[kukushking]

I raised a PR with PyMySQL to support passing the CA cert via cadata (I'd hate it if the library I was using was creating temp files with downloaded certs). Once it's merged, should be an easy fix to fetch the cert from Glue and pass it over to MySQL.

[kukushking]

@mshober Hi Matt, FYI the fix was merged and should be included in next release. Meanwhile, you can test it by installing development version of the wrangler:

pip uninstall awswrangler -y
pip install git+https://github.com/awslabs/aws-data-wrangler.git@main

[jaidisido]

Now covered in 2.8.0.