SSL for Java Web App Connection to Azure mySQL

Question

I'm interested in setting up an Azure Web App that connects to an instance of "Azure Database for MySQL server" and I have a few questions that the Documentation isn't answering (or I just haven't found the documentation that does).

I'm planning on having a mySQL Database closed off from the public and accessible only through a private endpoint within my Azure environment. This article explains how to do this. However, it does not really address SSL (only to say that restricting access to private endpoints has no impact on SSL settings) and various other pages strongly recommend keeping the SSL setting to enforced.

With this in mind, Java applications typically require certificates to be available in a trust store. Documentation located here suggests a specific certificate needed to access an SSL-required instance of Azure mySql.

Since I have a Java 11 app instance (with a Spring Boot Java 11 app in mind), would the app already have the required certification included in the Java runtime stack? Or is there an additional step to perform to ensure that the required certificate is available when my app finally launches?

Answer 1

Hi @John Jacko ,

Configure SSL for MySQL is the doc you're looking for. There you will find instructions on how to obtain the cert and to use it in your Java code. I don't believe the blessed images come with cert preconfigured so you can add the certificate to your app service and load it into the app using WEBSITE_LOAD_CERTIFICATES app setting.