MariaDB: Detect server version to determine SSL support

[Rescla]

1. What is not working as documented?

I see the following error message in the container log:
backup: mariadb-dump: Got error: 2026: \\"TLS/SSL error: SSL is required, but the server does not support it\\" when trying to connect (database)

2. How can we reproduce it?

Steps to reproduce the behavior:

1. A backup runs automatically (unsure how to trigger manually)
2. Observe container logging similar to backup: creating database backup file 2025-03-04.sql
3. Observe container logging error: backup: mariadb-dump: Got error: 2026: \\"TLS/SSL error: SSL is required, but the server does not support it\\" when trying to connect (database)

3. What behavior do you expect?

I expect the database dump to succeed.

4. What could be the cause of your problem?

The mariadb commandline assumes --ssl by default, according to https://stackoverflow.com/questions/78677369/mariadb-11-also-mysql-cli-error-2026-hy000-tls-ssl-error-ssl-is-required. So in this case, with a database running without TLS, it should provide --skip-ssl as a flag when running mariadb_dump.

5. Can you provide us with example files for testing, error logs, or screenshots?

6. Which software versions do you use?

(a) PhotoPrism Architecture & Build Number: AMD64 Build [250228-43447fa38]

(b) Database Type & Version: MariaDB:10.11 (without TLS)

(c) Operating System Types & Versions: Linux/Docker:latest

[lastzero]

Thank you for your report! Does it work when you upgrade the server to MariaDB 11?

[Rescla]

Will let you know after I try later today. Mariadb 10.11 is still supported for quite a while (https://endoflife.date/mariadb), but I don't think I have any blockers to upgrade.

[Rescla]

Seems like it's working as expected on 11.4 (current LTS release). I did run the backup command directly in the container, so the logging looks slightly different.

According to stackoverflow:

MariaDB 11.4 server always starts with TLS support (if you didn't configure TLS, the server will do that automatically)

It is also mentioned here: https://mariadb.com/kb/en/changes-improvements-in-mariadb-11-4/#ssltls

[rscs]

I'm also getting this error connecting to an external MariaDB instance. It would be great to be able to toggle TLS on/off for mariadb-dump in Photoprism with a flag.

[lastzero]

The above commit adds automatic detection of zero-configuration ssl support based on the database server version string (MariaDB version >= 11.3 is assumed to be compatible):

• https://mariadb.org/mission-impossible-zero-configuration-ssl/

You will be able to test these changes with our next development preview build, which will also be the release candidate for the stable version:

• https://docs.photoprism.app/release-notes/#development-preview
• https://docs.photoprism.app/getting-started/updates/#development-preview

@Rescla @rscs Any help testing would be much appreciated! 🙏