From f8c39f02578887033c560cdef5affe6d7d28d9f8 Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Thu, 19 Feb 2026 23:24:07 +0000 Subject: [PATCH] fix: remove ssl-mode=DISABLED to allow SSL when required by server The ssl-mode=DISABLED setting was breaking connections to MySQL servers with require_secure_transport=ON. The default ssl-mode=PREFERRED behavior is appropriate as it attempts SSL without certificate verification (so self-signed certs work) but falls back gracefully, and still allows connections to servers that require SSL. --- scripts/mysql-client-install.sh | 5 ----- 1 file changed, 5 deletions(-) diff --git a/scripts/mysql-client-install.sh b/scripts/mysql-client-install.sh index 3358ca99..4d63e45d 100755 --- a/scripts/mysql-client-install.sh +++ b/scripts/mysql-client-install.sh @@ -50,15 +50,10 @@ mkdir -p /etc/mysql/conf.d cat > /etc/mysql/conf.d/lando.cnf << 'MYCNF' [client] default-character-set=utf8mb4 -# Disable SSL verification for local dev — containers on the same Docker -# network don't need encrypted connections, and older MySQL versions -# (e.g. 5.7) use self-signed certs that cause verification failures -ssl-mode=DISABLED [mysqldump] # Prevent column-statistics errors with newer mysqldump skip-column-statistics -ssl-mode=DISABLED MYCNF if ! mysql --version 2>/dev/null; then