# Ghost with connection to central MySQL server in Microsoft Azure Cloud with SSL

**URL:** <https://forum.ghost.org/t/ghost-with-connection-to-central-mysql-server-in-microsoft-azure-cloud-with-ssl/35955>\
**Category:** Self-hosting\
**Created:** [February 1, 2023, 9:56am UTC](https://forum.ghost.org/t/ghost-with-connection-to-central-mysql-server-in-microsoft-azure-cloud-with-ssl/35955 "2023-02-01T09:56:40Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![843539845983](https://avatars.discourse-cdn.com/v4/letter/8/5f8ce5/32.png) [@843539845983](https://forum.ghost.org/u/843539845983)\
**Post date:** [February 1, 2023, 9:56am UTC](https://forum.ghost.org/t/ghost-with-connection-to-central-mysql-server-in-microsoft-azure-cloud-with-ssl/35955/1 "2023-02-01T09:56:40Z")

</div>

Due to tightened security, the central MySQL database used by our Ghost instance in Microsoft Azure was switched to SSL enforced with TLS version 1.2.

Unfortunately, the Ghost instance does not seem to be able to connect to the database because the MySQL connection is not configured for SSL.

I have already found the following two posts on this topic, but they are already four years old:  
[mySQL with SSL over cloud networks - Developer help - Ghost Forum](https://forum.ghost.org/t/mysql-with-ssl-over-cloud-networks/3623)  
[Configure mysql over tls/ssl - Developer help - Ghost Forum](https://forum.ghost.org/t/configure-mysql-over-tls-ssl/2297/9)

Have any of you had experience configuring secure MySQL connections in Ghost?

On the one hand, the connection must be switched to TLS. Then the CA certificate from DigiCertGlobalRootCA would have to be suitably added to the connection.

---

<div class="post-metadata">

**Author:** ![markstos](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/markstos/32/18182_2.png) [@markstos](https://forum.ghost.org/u/markstos)\
**Post date:** [February 1, 2023, 2:02pm UTC](https://forum.ghost.org/t/ghost-with-connection-to-central-mysql-server-in-microsoft-azure-cloud-with-ssl/35955/2 "2023-02-01T14:02:09Z")

</div>

I recommend the MySQL manual section on connection strings. ssl-mode and other options are documented there:

[https://dev.mysql.com/doc/refman/8.0/en/connecting-using-uri-or-key-value-pairs.html](https://dev.mysql.com/doc/refman/8.0/en/connecting-using-uri-or-key-value-pairs.html)

Exactly what you’ll need will depend on the server settings. Look in your Azure MySQL settings for connection string guidance.