Is it possible to connect with typeorm to an instance of sql gcloud by ssl?

user_10487192 0
Viewed 3859

I'm trying to create an SSL connection to a SQL instance in google cloud. I'm using node.js, typescript and typeorm as orm.

I would like to do it using ormconfig.json. The official documentation says that it's possible, but it only uses one parameter (CA File). I need to use 3 SSL files: server-ca.pem, client-cert.pem and client-key.pem.

I can connect with the following mysql command: 

"mysql -uroot -p -h 35.225.71.53 --ssl-ca=server-ca.pem --ssl-cert=client-cert.pem  --ssl-key=client-key.pem"

I try with this ormconfig.json, but it didn't work:

{
   "type": "mysql",
   "host": "IP",
   "port": 3306,
   "username": "user",
   "password": "password",
   "database": "database",
   "ssl": {
      "ca": "path/to/server-ca.pem",
      "cert": "path/to/server-cert.pem",
      "key": "path/to/erver-key.pem"
   }
...
}

and other combinations.

The error that i receibe when a I execute a command (for example: typeorm migration:run) is:

typeorm migrations:run
Error during migration run:
{ Error: error:0906D06C:PEM routines:PEM_read_bio:no start line
    at Object.createSecureContext (_tls_common.js:104:17)
    at createSecureContext (C:\Users\Lucas\Desktop\koa\cloudfunctions\functions\node_modules\mysql\lib\Connection.js:466:19)
    at PoolConnection._startTLS (C:\Users\Lucas\Desktop\koa\cloudfunctions\functions\node_modules\mysql\lib\Connection.js:282:5)
    at Handshake.<anonymous> (C:\Users\Lucas\Desktop\koa\cloudfunctions\functions\node_modules\mysql\lib\protocol\Protocol.js:172:24)
    at emitNone (events.js:106:13)
    at Handshake.emit (events.js:208:7)
    at Handshake.HandshakeInitializationPacket (C:\Users\Lucas\Desktop\koa\cloudfunctions\functions\node_modules\mysql\lib\protocol\sequences\Handshake.js:78:10)
    at Protocol._parsePacket (C:\Users\Lucas\Desktop\koa\cloudfunctions\functions\node_modules\mysql\lib\protocol\Protocol.js:291:23)
    at Parser._parsePacket (C:\Users\Lucas\Desktop\koa\cloudfunctions\functions\node_modules\mysql\lib\protocol\Parser.js:433:10)
    at Parser.write (C:\Users\Lucas\Desktop\koa\cloudfunctions\functions\node_modules\mysql\lib\protocol\Parser.js:43:10)
    --------------------
    at Protocol._enqueue (C:\Users\Lucas\Desktop\koa\cloudfunctions\functions\node_modules\mysql\lib\protocol\Protocol.js:144:48)
    at Protocol.handshake (C:\Users\Lucas\Desktop\koa\cloudfunctions\functions\node_modules\mysql\lib\protocol\Protocol.js:51:23)
    at PoolConnection.connect (C:\Users\Lucas\Desktop\koa\cloudfunctions\functions\node_modules\mysql\lib\Connection.js:119:18)
    at Pool.getConnection (C:\Users\Lucas\Desktop\koa\cloudfunctions\functions\node_modules\mysql\lib\Pool.js:48:16)
    at C:\Users\Lucas\AppData\Roaming\npm\node_modules\typeorm\driver\mysql\MysqlDriver.js:764:18
    at new Promise (<anonymous>)
    at MysqlDriver.createPool (C:\Users\Lucas\AppData\Roaming\npm\node_modules\typeorm\driver\mysql\MysqlDriver.js:761:16)
    at MysqlDriver.<anonymous> (C:\Users\Lucas\AppData\Roaming\npm\node_modules\typeorm\driver\mysql\MysqlDriver.js:274:51)
    at step (C:\Users\Lucas\AppData\Roaming\npm\node_modules\typeorm\node_modules\tslib\tslib.js:133:27)
    at Object.next (C:\Users\Lucas\AppData\Roaming\npm\node_modules\typeorm\node_modules\tslib\tslib.js:114:57) code: 'HANDSHAKE_SSL_ERROR', fatal: true }

C:\Users\Lucas\Desktop\koa\cloudfunctions\functions>
typeorm typescript node.js ssl mysql
2 Answers

In the TypeORM docs for SSL options, they mention:

Please note the arguments expect a string of the certificate, not a file name to the certificate.

Therefore you need to load the files to connect to a Google Cloud SQL instance, rather than just providing the path:

const fs = require("fs");

{
   "type": "mysql",
   "host": "IP",
   "port": 3306,
   "username": "user",
   "password": "password",
   "database": "database",
   "ssl": {
     "ca": fs.readFileSync(__dirname + '/server-ca.pem'),
     "cert": fs.readFileSync(__dirname + '/client-cert.pem'),
     "key": fs.readFileSync(__dirname + '/client-key.pem'),
   }
...
}
user_68362630

To work with MySql in SSL with TypeORM in 2021, you must install mysql2 and not mysql.

npm install mysql  // Isn't correct

npm install mysql2  // Is correct
user_135084540
Related