Skip to content

Configure drush to skip requiring ssl for remote db connections #19

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
tekante wants to merge 2 commits into
base: master
Choose a base branch
from
Open

Configure drush to skip requiring ssl for remote db connections #19

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
a4e5ec7
Configure drush to skip requiring ssl for remote db connections
tekante Feb 9, 2026
462e967
Defaulting some more commands to disable ssl.
tekante Feb 10, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions src/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -73,6 +73,9 @@ RUN \
# Also write yarn to the default-packages file to be installed with nvm
. "$HOME"/.profile && echo "yarn" > "$NVM_DIR"/default-packages

RUN mkdir -p /home/docker/.drush/config
COPY ./home/docker/.drush/config/drush.yml /home/docker/.drush/config

ENV PATH=$PATH:/var/www/vendor/bin
# IMPORTANT! Switching back to the root user as the last instruction.
USER root
23 changes: 23 additions & 0 deletions src/home/docker/.drush/config/drush.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
command:
sql:
cli:
options:
extra: '--disable-ssl'
query:
options:
extra: '--disable-ssl'
dump:
options:
extra: '--disable-ssl'
extra-dump: '--disable-ssl'
drop:
options:
extra: '--disable-ssl'
create:
options:
extra: '--disable-ssl'
site:
install:
options:
extra: '--disable-ssl'
Comment on lines +2 to +22
Copy link

@coderabbitai coderabbitai bot Feb 10, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🌐 Web query:

MariaDB 11.4 mysql client --disable-ssl flag

💡 Result:

For the MariaDB 11.4 command-line client (mariadb, and often the mysql symlink on MariaDB installs), the way to disable TLS/SSL is:

  • Disable SSL entirely: --disable-ssl (synonym: --skip-ssl) [1][2]
    Example:

    mariadb -h <host> -u <user> -p --skip-ssl
# or
mysql -h <host> -u <user> -p --disable-ssl

  • If you only meant “don’t verify the server cert” (but still use TLS): --disable-ssl-verify-server-cert [1]

If you’re coming from Oracle MySQL docs: --ssl-mode=DISABLED is the MySQL-style flag, but the MariaDB client historically did not support --ssl-mode (see MariaDB issue discussion) [3].

Make it permanent (no flag each time):

# ~/.my.cnf
[client]
skip-ssl=true

[2]

Sources: MariaDB client option docs [1], MariaDB docs mirror [1], Stack Overflow discussion of MariaDB 11 client SSL defaults and --skip-ssl/config file [2], MariaDB Jira about missing --ssl-mode and equivalence to --skip-ssl/--disable-ssl [3].

🌐 Web query:

mysqldump disable SSL flag MariaDB

💡 Result:

To disable TLS/SSL for mysqldump when using MariaDB’s client, use:

mysqldump --skip-ssl -h HOST -u USER -p DBNAME > dump.sql

--ssl enables TLS, and the way to disable it is --skip-ssl. [1]

Notes:

  • On newer MariaDB versions the tool may be named mariadb-dump (with mysqldump as a legacy name/symlink), and the same flag works: mariadb-dump --skip-ssl .... [2]
  • If you’re looking at MySQL examples like --ssl-mode=DISABLED, MariaDB commonly uses --skip-ssl instead. [3]

Sources:
[1] https://manpages.debian.org/experimental/mariadb-client-10.6/mysqldump.1.en.html
[2] https://mariadb.com/kb/en/mysqldump/
[3] https://stackoverflow.com/questions/61649764/mysql-error-2026-ssl-connection-error-ubuntu-20-04

🌐 Web query:

Drush site:install options.extra configuration support

💡 Result:

Yes—site:install supports an --extra option, and you can configure it in drush.yml as a command-specific option.

CLI option

drush site:install includes --extra=EXTRA (“Add custom options to the SQL connect string”). [1]

drush.yml configuration

In drush.yml, command-specific options go under command.<namespace>.<command>.options, so for site:install:

command:
  site:
    install:
      options:
        extra: "--skip-column-names"
        # examples of other supported options:
        # account-name: "alice"
        # account-pass: "secret"
        # existing-config: true

Drush’s config docs show this exact structure for site:install options (e.g., account-name, account-pass). [2]

Note: the config key is extra, not options.extra—options: is the YAML section name Drush uses for “command options.” [2]

Sources: [1] [2]

Update sql.dump.options.extra to use --skip-ssl instead of --disable-ssl for mysqldump compatibility.

The --disable-ssl flag is valid for the MariaDB mysql client but mysqldump requires --skip-ssl to disable SSL. Update the dump configuration:

Diff 
  sql:
    dump:
      options:
-       extra: '--disable-ssl'
+       extra: '--skip-ssl'
        extra-dump: '--disable-ssl'

The site:install options.extra configuration is valid. Verify that extra-dump under sql.dump.options is a supported Drush configuration key for your version.

📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
sql:
cli:
options:
extra: '--disable-ssl'
query:
options:
extra: '--disable-ssl'
dump:
options:
extra: '--disable-ssl'
extra-dump: '--disable-ssl'
drop:
options:
extra: '--disable-ssl'
create:
options:
extra: '--disable-ssl'
site:
install:
options:
extra: '--disable-ssl'
sql:
cli:
options:
extra: '--disable-ssl'
query:
options:
extra: '--disable-ssl'
dump:
options:
extra: '--skip-ssl'
extra-dump: '--disable-ssl'
drop:
options:
extra: '--disable-ssl'
create:
options:
extra: '--disable-ssl'
site:
install:
options:
extra: '--disable-ssl'
🤖 Prompt for AI Agents 
In `@src/home/docker/.drush/config/drush.yml` around lines 2 - 22, Update the
mysqldump-related Drush config: change sql.dump.options.extra (and any
sql.dump.options.extra-dump) values from '--disable-ssl' to '--skip-ssl' so
mysqldump disables SSL correctly; keep site.install.options.extra as-is; also
verify whether the sql.dump.options.extra-dump key is supported by your Drush
version and remove or consolidate it into sql.dump.options.extra if it’s not
supported (referencing the sql.dump.options.extra, sql.dump.options.extra-dump,
and site.install.options.extra entries).


Loading