From 5c564e4f06a7bd9924be876c4c3a4e79c2ab535f Mon Sep 17 00:00:00 2001
From: Sanketh Nalli <snalli@linkedin.com>
Date: Wed, 18 Dec 2024 16:31:51 -0800
Subject: [PATCH] [mysql] Verify credentials for cert-based access

---
 .../java/com/github/ambry/named/MySqlNamedBlobDbFactory.java     | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ambry-named-mysql/src/main/java/com/github/ambry/named/MySqlNamedBlobDbFactory.java b/ambry-named-mysql/src/main/java/com/github/ambry/named/MySqlNamedBlobDbFactory.java
index 7ecdea9836..1e59cae51a 100644
--- a/ambry-named-mysql/src/main/java/com/github/ambry/named/MySqlNamedBlobDbFactory.java
+++ b/ambry-named-mysql/src/main/java/com/github/ambry/named/MySqlNamedBlobDbFactory.java
@@ -63,6 +63,7 @@ public HikariDataSource buildDataSource(DbEndpoint dbEndpoint) {
     hikariConfig.setJdbcUrl(dbEndpoint.getUrl());
     hikariConfig.setUsername(dbEndpoint.getUsername());
     hikariConfig.setPassword(dbEndpoint.getPassword());
+    hikariConfig.addDataSourceProperty("sslMode", "VERIFY_CA");
     hikariConfig.setMaximumPoolSize(
         dbEndpoint.getDatacenter().equals(localDatacenter) ? config.localPoolSize : config.remotePoolSize);
     // Recommended properties for automatic prepared statement caching