Error on Manage Module page

Nilesh_Hake · August 24, 2024, 1:15pm

Below error is showing the Manage module page. Is any one have idea for below error
[Sat Aug 24 13:12:50.955207 2024] [php:notice] [pid 7251] [client 10.0.1.113:58628] ERROR: \r Exception: Connect Error: SQLSTATE[HY000] [2002] Cannot connect to MySQL using SSL\r Exception: SQLSTATE[HY000] [2002] Cannot connect to MySQL using SSL\r Exception: PDO::__construct(): SSL operation failed with code 1. OpenSSL Error messages:\nerror:0A000086:SSL routines::certificate verify failed\n SQL statement : SELECT * FROM modules ORDER BY mod_ui_order ASC\n #0 /var/www/localhost/htdocs/openemr/vendor/laminas/laminas-db/src/Adapter/Driver/Pdo/Pdo.php(253): Laminas\Db\Adapter\Driver\Pdo\Connection->connect()\n#1 /var/www/localhost/htdocs/openemr/vendor/laminas/laminas-db/src/Adapter/Adapter.php(181): Laminas\Db\Adapter\Driver\Pdo\Pdo->createStatement()\n#2 /var/www/localhost/htdocs/openemr/interface/modules/zend_modules/module/Application/src/Application/Model/ApplicationTable.php(62): Laminas\Db\Adapter\Adapter->query()\n#3 /var/www/localhost/htdocs/openemr/interface/modules/zend_modules/module/Installer/src/Installer/Model/InstModuleTable.php(343): Application\Model\ApplicationTable->zQuery()\n#4 /var/www/localhost/htdocs/openemr/interface/modules/zend_modules/module/Installer/src/Installer/Controller/InstallerController.php(62): Installer\Model\InstModuleTable->allModules()\n#5 /var/www/localhost/htdocs/openemr/vendor/laminas/laminas-mvc/src/Controller/AbstractActionController.php(72): Installer\Controller\InstallerController->indexAction()\n#6 /var/www/localhost/htdocs/openemr/vendor/laminas/laminas-eventmanager/src/EventManager.php(320): Laminas\Mvc\Controller\AbstractActionController->onDispatch()\n#7 /var/www/localhost/htdocs/openemr/vendor/laminas/laminas-eventmanager/src/EventManager.php(178): Laminas\EventManager\EventManager->triggerListeners()\n#8 /var/www/localhost/htdocs/openemr/vendor/laminas/laminas-mvc/src/Controller/AbstractController.php(105): Laminas\EventManager\EventManager->triggerEventUntil()\n#9 /var/www/localhost/htdocs/openemr/vendor/laminas/laminas-mvc/src/DispatchListener.php(117): Laminas\Mvc\Controller\AbstractController->dispatch()\n#10 /var/www/localhost/htdocs/openemr/vendor/laminas/laminas-eventmanager/src/EventManager.php(320): Laminas\Mvc\DispatchListener->onDispatch()\n#11 /var/www/localhost/htdocs/openemr/vendor/laminas/laminas-eventmanager/src/EventManager.php(178): Laminas\EventManager\EventManager->triggerListeners()\n#12 /var/www/localhost/htdocs/openemr/vendor/laminas/laminas-mvc/src/Application.php(319): Laminas\EventManager\EventManager->triggerEventUntil()\n#13 /var/www/localhost/htdocs/openemr/src/Core/ModulesApplication.php(168): Laminas\Mvc\Application->run()\n#14 /var/www/localhost/htdocs/openemr/interface/modules/zend_modules/public/index.php(59): OpenEMR\Core\ModulesApplication->run()\n#15 {ma, referer: https://testing/interface/main/tabs/main.php?token_main=HAcf1PeGliiK4koqnspuQXfO7fGldbzbSOn0oFIF
[Sat Aug 24 13:12:50.955308 2024] [php:warn] [pid 7251] [client 10.0.1.113:58628] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/localhost/htdocs/openemr/interface/modules/zend_modules/module/Installer/src/Installer/Controller/InstallerController.php on line 65, referer: https://testing/interface/main/tabs/main.php?token_main=HAcf1PeGliiK4koqnspuQXfO7fGldbzbSOn0oFIF

adunsulag · August 26, 2024, 5:21pm

Verify the ssl certificate used to connect to mysql in OpenEMR is up to date. If the system is using an AWS RDS instance, AWS rotated certificates on the August 22nd for their RDS servers. Saw this error recently with someone else.

Nilesh_Hake · August 26, 2024, 5:25pm

@adunsulag,

Do I need to update SSL and then this issue will resolve or how can I solve this issue ?

adunsulag · August 26, 2024, 5:30pm

You will need to update the mysql-ca file stored on the OpenEMR server as described in this document

github.com

openemr/openemr/blob/master/sites/default/documents/certificates/README.md

This is to store certificates in order to support encryption.

For mysql ssl support:
1. To support mysql ssl encryption, include the `mysql-ca` here (this is the CA certificate in pem form and is mandatory for mysql ssl).
2. Can also support client based certificate if also include mysql-cert and mysql-key (these are client certificate and client key in pem form and these are optional for mysql ssl)
3. For debugging purposes, if set `$GLOBALS['debug_ssl_mysql_connection']` to `true` at top of interface/globals.php, then will send messages to php log to show if mysql connections have a cipher set up.
4. To properly create the keys and certificates, see documentation here: https://dev.mysql.com/doc/refman/8.0/en/creating-ssl-files-using-openssl.html
5. When creating the keys and certificates, vital to enter in correct information for the `Common Name` of each entity:
- `Common Name` of CA certificate: This can be anything, but needs to be different than what is used for Server and Client
- `Common Name` of Server certificate: This has to be the host name(or ip address) that the client uses to log into the mysql server.
- `Common Name` of Client certificate: Set this to the host name of the client.

For couchdb ssl support:
1. To support couchdb ssl encryption, include the `couchdb-ca` here (this is the CA certificate in pem form).
2. Can also support client based certificate if also include couchdb-cert and couchdb-key (these are client certificate and client key in pem form and these are optional for couchdb ssl)
3. To properly create the keys and certificates, see documentation here: https://dev.mysql.com/doc/refman/8.0/en/creating-ssl-files-using-openssl.html
4. When creating the keys and certificates, vital to enter in correct information for the `Common Name` of each entity:
- `Common Name` of CA certificate: This can be anything, but needs to be different than what is used for Server and Client
- `Common Name` of Server certificate: This has to be the host name(or ip address) that the client uses to log into the mysql server.
- `Common Name` of Client certificate: Set this to the host name of the client.

This file has been truncated. show original

So update the /sites/default/documents/certificates/mysq-ca.pem file. If you are using RDS you can grab the PEM file here with the below url, (rename it to mysql-ca.pem). The global one is usually good but you can restrict it to a specific region if needed.

Nilesh_Hake · August 26, 2024, 5:32pm

Ok Thanks I will update my file as per document and update you here

Nilesh_Hake · August 27, 2024, 4:37am

Thanks @adunsulag I am able solve this issue using above your comments