Getting HANDSHAKE_SSL_ERROR with aws Aurora - amazon-web-services

I am trying to create MySQL connection with AWS aurora from ec2 in the same VPC.
I am getting a HANDSHAKE_SSL_ERROR error.
Node version 12. AWS Aurora MySQL version 8.0.mysql_aurora.3.01.1.
I tried all TLSv1, TLSv1.1, and TLSv1.2 values in tls_version params, still same error.
Is there any configuration missing here?

Related

AWS DMS. Endpoint connection fails in replication instance (Error: 1020912) still persist

Test Endpoint failed: Application-Status: 1020912, Application-Message: Failed to connect Network error has occurred, Application-Detailed-Message: RetCode: SQL_ERROR SqlState: 08001 NativeError: 101 Message: [unixODBC]could not connect to server: No route to host Is the server running on host "xxx.ap-southeast-1.rds.amazonaws.com" (192.168.0.31) and accepting TCP/IP connections on port 5432?
I researched from the latest topic about this issue and documentations.
I'm sure you gonna ask me to check networking things.
I have checked everything try to provision the ec2 to check the connectivity such as rtb, sg, acl.
Sure my ec2 can connect to RDS.
I tested further by provision DMS instance v3.4.7 in the same subnet, same sg as the ec2 that I have tested. So it always show the error that I mention earlier.
The db is a source endpoint with RDS postges 12. I do this the same with RDS aurora postges 13 compatible.
Now I have no idea and need some help if someone has the same issue here.
Thanks.

How can i get my rds-ca-2019 pem file from AWS RDS Amazon

I have an RDS I have created with AWS of type postgresql
Under connectivity, i as see it defined a rds-ca-2019
I need that certificate for connection from a Java client application
I tried using global pem, but it seems not to match and failing on SSL connection
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html
Where can i get this rds-ca-2019 certificate
The download resource i was looking can be found as below in the attacked link
https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-download-ssl-certificate-for-managed-database

AWS RDS updating SSL/TLS cert without restart

I got a notification from AWS that I need to update my SSL/TLS cert for my RDS instances by 2/5/2020 (As seen here). I don't use SSL/TLS and I understand that I still have to do this, but I can do it without having to restart with the following command:
aws rds modify-db-instance --db-instance-identifier <myinstance> --ca-certificate-identifier rds-ca-2019 --no-certificate-rotation-restart --region us-east-1
After running this for one of my db instances, I got a json output with some details about the instance. Is there a way to verify that --no-certificate-rotation-restart was applied to the instance?
You can find out what SSL/TLS certificate is in use using the RDS console > Databases > Connectivity & security.
It will include something like:
Certificate authority
rds-ca-2019
Certificate authority date
Aug 22nd, 2024

How to connect to AWS EMR via AWS QuickSight

I am trying to connect to AWS QuickSight with AWS EMR via Spark JDBC.
I gave hostname of AWS EMR Master node and Port 18080, but I am not sure about the username and password.
https://i.stack.imgur.com/66Acv.png
Even when i click on validate i am getting the below error:
[Simba]SparkJDBCDriver Error initialized or created
transport for authentication: javax.net.ssl.SSLException: Unrecognized
SSL message, plaintext connection?.
Couldnt find anywhere on what needs to be inputted in the fields. Any help would be appreciated.
I figured out. here are the steps:
Start thriftserver in EMR server.
sudo /usr/lib/spark/sbin/start-thriftserver.sh
The port for Spark Thriftserver will be : 10001
Either enable this port in EMR inbound setting or use SSH Tunnel to connect to spark via JDBC.
Username and password could be anything.
SSL needs to be unchecked in QuickSight to connect.

AWS - Data Migration Service

Trying to Migrate RDS mysql to Redshift, When connecting the AWS RedShift Database in Target Connection it Throws the Error:
Test Endpoint failed: Application-Status: 1020912, Application-Message: IN/A, Application-Detailed-Message: N/A
Please help to resolve...
I have resolved my issue by adding few ingress/egress rules weren't defined on the security groups which are attached to DMS and Redshift.
Check this link for further information: AWS DMS endpoint connection to Redshift not working
For me, the private IP of redshift in the server name of the endpoint worked. I don't know why but it's working now.
AWS - Data Migration Service Endpoint Redshift error (Test failed)
The Leader private IP of redshift in the server name of the endpoint will work.
In your DMS (Data Migration Service) configuration where you enter the Server Name value, avoid the Redshift cluster DNS Name or the Public IP address. Instead, try using the private IP of the Redshift Leader node. It worked for me after I changed to the private IP of leader node.