MySQL Public Key Retrieval is not allowed

[Thu Yein Tun]

My db server is mysql 8.0.11 and driver version 5.1.46. 

When ssl is enabled, and tries to connect to the database, confluence setup reports the following. 

Problem connecting to your database

SQLState - S1000
java.sql.SQLException: Illegal operation on empty result set.

But if "skip_ssl" is written to my.cnf and restarted mysql, then it shows the following error message.

Problem connecting to your database

SQLState - 08001
com.mysql.jdbc.exceptions.jdbc4.MySQLNonTransientConnectionException: Public Key Retrieval is not allowed

Below is the output of logs/catalina.out

20-Apr-2018 14:35:35.680 INFO [main] org.apache.catalina.startup.Catalina.start Server startup in 6392 ms
Fri Apr 20 14:37:39 SGT 2018 WARN: Establishing SSL connection without server's identity verification is not recommended. According to MySQL 5.5.45+, 5.6.26+ and 5.7.6+ requirements SSL connection must be established by default if explicit option isn't set. For compliance with existing applications not using SSL the verifyServerCertificate property is set to 'false'. You need either to explicitly disable SSL by setting useSSL=false, or set useSSL=true and provide truststore for server certificate verification.

I also tried with the following connection string to disable verification and ssl

jdbc:mysql://localhost/confluencedb?verifyServerCertificate?=false&useSSL=false 

[Thu Yein Tun · Accepted solution]

For prosperity purposes, this has been solved by downgrading mysql 8.0 to mysql 5.7.22. Confluence documentation should state that it is not compatible with mysql 8.0.

[Nic Brough -Adaptavist-]

It does.   See https://confluence.atlassian.com/doc/supported-platforms-207488198.html

[Mohamid Shaker]

.

[Mohamid Shaker]

Hi Thanks for your answer. I had have same problem so the solution that's worked for me it's by deleting useSSL= false at all. 

Maybe because i dont ssl file at all in my computer !!

[PhoodeeApp]

i am suing DBeaver for database connection. where should i enable this ?

[Nic Brough -Adaptavist-]

We probably can't tell you - this is a place for Atlassian people, only a few of us might have experience with Dbeaver.

[Andre Tzermias]

@PhoodeeApp 

To change the settings on Dbeaver:

1) Right click your connection, choose "Edit Connection"

2) On the "Connection settings" screen (main screen) click on "Edit Driver Settings"

3) Click on "Connection properties"

4) Right click the "user properties" area and choose "Add new property"

5) Add two properties: "useSSL" and "allowPublicKeyRetrieval"

6) Set their values to  "false" and "true" by double clicking on the "value" column

Save and re-test the connection. Hopefully it should work!

[Pierre Silva]

Nice...

[abitencourtjunior]

This worked for me, thanks.

[Marco Vargas]

Great work @Andre Tzermias , it worked great for me.

[Israel Araujo]

Obrigado @Andre Tzermias , funcionou perfeitamente para mim.

[Julien FENEROL]

It works! Thanks a lot :)

[sparten117]

That worked for me Thank You

[pgavilan]

THANKS!!! GRACIAS!!!

[ahenteti]

Thanks @Andre Tzermias it works great for me :)

[Juan Carlos Ramos]

It works! Thanks a lot!!

[vedprakash1985]

It works !!thanks 

[Felipe Sartori]

Worked for me!

[Jesman Dzimba]

Super grateful

[Claudio Barca]

This worked for me. Thanks.

[Amit Luthra]

Thanks! it worked for dbeaver

[Spice Jamo]

thanks it works great!!

[Alejandro Campos]

Thanks a lot! its works in DBeaver v21.0.3

[luigi.izzo]

Worked for me!

[RuiFortes]

Same here! Thanks :-)

[Santiago VB]

Works! Wonderful.

[amanda91]

Thanks, worked for me!

[Raul H_ Lapitzondo]

This worked, thanks.

[chethan bv]

jdbc:mysql://localhost/confluencedb?allowPublicKeyRetrieval=true&useSSL=false 

use this 

[aajjss3]

This worked for me, thanks.

[xZHARKONx]

Hola que tal, a mi me a funcionado tu configuración para mi pool de conexiones, en Mysql 8.0 Corriendo en Glassfish 5 :D
Gracias, Saludos.

Hi, this my configuration,  i worked in Mysql 0.8 with Glassfish 5 Server, Thanks :D
Diver:

<dependency>
<groupId>mysql</groupId>
<artifactId>mysql-connector-java</artifactId>
<version>5.1.46</version>
</dependency>

[Josep Llort Tella]

I think the issue is because you have followed the MySQL installation wizard and you have setup the "Use Strong password encription" option what now comes by default rather "Legacy authentication". If you are on Windows, you can execute the installer, click on reconfigure , follow the wizard and switch to Legacy.

Another solution is to fight with SSL Authentication ( not trivial ); below some url:

https://dev.mysql.com/doc/connector-j/5.1/en/connector-j-reference-using-ssl.html

https://dev.mysql.com/doc/refman/5.7/en/creating-ssl-rsa-files-using-mysql.html

Also be sure you are using the latest driver for working with MySQL 8. If you at the end disable SSL, remove from your query connection the "verifyServerCertificate=false&useSSL=false" or you will get another errors ( yes it's a jigsaw ).

[Dp H]

This worked. Thanks so much!.. 

If you change the password encryption from "Use Strong password encryption" to "Use legacy password encryption" to be compatible with MySQL 5.x connectors this will be solved.

On Mac, go to System Preferences -> MySQL -> Initialize Database to change this setting. 

[dilli lekhak]

Hi, I am using macOS Catalina, Version 10.15.5, and faced the same error in my eclipse console while running my application. I had upgraded to MySQL 8.0.20 on the same day after facing some issues with homebrew. After going over the above comments and suggestions, I solved it by adding the following in my application properties:

spring.datasource.url=jdbc:mysql://localhost:3306/myDatabase?allowPublicKeyRetrieval=true

Thanking for your feedback.