title: Mysql Nginx Proxy with VERIFY_IDENTITY
body: <p>We have configured an Nginx proxy for AWS RDS to get a static IP address, which has to be whitelist on the Network ACL outbound of the VPC on another AWS Account ( tunneling is not possible ). The Nginx proxy pass is working but the MySQL server validation ( VERIFY_IDENTITY ) is failing with the error.</p>
  
  <blockquote>
    <p>mysql -h Proxy Server Address --ssl-ca=rds-ca-2015-root.pem --ssl-mode=VERIFY_IDENTITY  -u admin -p</p>
    
    <p>Failed to verify the server certificate via X509 certificate matching functions</p>
  </blockquote>
  
  <p>I use this AWS Document to download the CA certificate <a href="https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html" rel="nofollow noreferrer">link</a></p>
  
  <p>Nginx configuration</p>
  
  <pre><code>stream {
     upstream mysql_server {
        server *******.us-east-1.rds.amazonaws.com:3306;
     }
     server {
        listen                3306;
        proxy_pass            mysql_server;
     }
  }
  </code></pre>
  
  <p>I am missing anything on the Nginx configuration or is it not possible to do the server identity verify when the AWS RDS is behind the Nginx TCP proxy?</p>