Connect to application DB on MariaDB with SSL

Zenior · November 13, 2025, 12:57pm

I had a system running (using the JAR) where the Metabase application database was running remotely. The required settings where all provided in Environment variables. It worked just like the help said.

Now this server got a SSL certificate. Within VSCode I could just change the DBCode connection by clicking “use SSL” and “Truster server certificate” and it kept on connection. For starting the Metabase jar, the Help tells me to setup the environment with a MB_DB_CONNECTION_URI and separate varibles for username and password. I did just that, but it doesn’t work. Her is my MB_DB_CONNECTION_URI="jdbc:mysql://serverIP:port/dbname?ssl=true&sslmode=prefer"

I also tried a different version, found in mysql help:

set MB_DB_CONNECTION_URI="jdbc:mysql://serverIP:port/dbname?sslMode=PREFERRED"

Finally I tried mariadb instead of mysql.

The result of starting up the Jar is below (and the same for all tried options). Any idea what to change?

2025-11-13 11:09:45,385 INFO util.encryption :: Saved credentials encryption is DISABLED for this Metabase instance.
For more information, see Redirecting…
Exception in thread "main" java.lang.AssertionError: Assert failed: (#{:postgres :h2 :mysql} db-type)
at metabase.app_db.connection$application_db.invokeStatic(connection.clj:64)
at metabase.app_db.connection$application_db.doInvoke(connection.clj:64)
at clojure.lang.RestFn.invoke(RestFn.java:467)
at metabase.app_db.connection__init.load(Unknown Source)
at metabase.app_db.connection__init.(Unknown Source)
at java.base/java.lang.Class.forName0(Native Method)
at java.base/java.lang.Class.forName(Class.java:534)
at java.base/java.lang.Class.forName(Class.java:513)
at clojure.lang.RT.classForName(RT.java:2229)
at clojure.lang.RT.classForName(RT.java:2238)
at clojure.lang.RT.loadClassForName(RT.java:2257)
at clojure.lang.RT.load(RT.java:469)
at clojure.lang.RT.load(RT.java:444)
at clojure.core$load$fn__6933.invoke(core.clj:6189)
at clojure.core$load.invokeStatic(core.clj:6188)
at clojure.core$load.doInvoke(core.clj:6172)
at clojure.lang.RestFn.invoke(RestFn.java:411)
at clojure.core$load_one.invokeStatic(core.clj:5961)
at clojure.core$load_one.invoke(core.clj:5956)
at clojure.core$load_lib$fn__6875.invoke(core.clj:6003)
at clojure.core$load_lib.invokeStatic(core.clj:6002)
at clojure.core$load_lib.doInvoke(core.clj:5981)
at clojure.lang.RestFn.applyTo(RestFn.java:145)
at clojure.core$apply.invokeStatic(core.clj:669)
at clojure.core$load_libs.invokeStatic(core.clj:6044)
at clojure.core$load_libs.doInvoke(core.clj:6028)
at clojure.lang.RestFn.applyTo(RestFn.java:140)
at clojure.core$apply.invokeStatic(core.clj:669)
at clojure.core$require.invokeStatic(core.clj:6066)
at clojure.core$require.doInvoke(core.clj:6066)
at clojure.lang.RestFn.invoke(RestFn.java:1526)
at metabase.app_db.core$loading__6814__auto____46490.invoke(core.clj:1)
at metabase.app_db.core__init.load(Unknown Source)
at metabase.app_db.core__init.(Unknown Source)
at java.base/java.lang.Class.forName0(Native Method)
at java.base/java.lang.Class.forName(Class.java:534)
at java.base/java.lang.Class.forName(Class.java:513)
at clojure.lang.RT.classForName(RT.java:2229)
at clojure.lang.RT.classForName(RT.java:2238)
at clojure.lang.RT.loadClassForName(RT.java:2257)
at clojure.lang.RT.load(RT.java:469)
at clojure.lang.RT.load(RT.java:444)
at clojure.core$load$fn__6933.invoke(core.clj:6189)
at clojure.core$load.invokeStatic(core.clj:6188)
at clojure.core$load.doInvoke(core.clj:6172)
at clojure.lang.RestFn.invoke(RestFn.java:411)
at clojure.core$load_one.invokeStatic(core.clj:5961)
at clojure.core$load_one.invoke(core.clj:5956)
at clojure.core$load_lib$fn__6875.invoke(core.clj:6003)
at clojure.core$load_lib.invokeStatic(core.clj:6002)
at clojure.core$load_lib.doInvoke(core.clj:5981)
at clojure.lang.RestFn.applyTo(RestFn.java:145)
at clojure.core$apply.invokeStatic(core.clj:669)
at clojure.core$load_libs.invokeStatic(core.clj:6044)
at clojure.core$load_libs.doInvoke(core.clj:6028)
at clojure.lang.RestFn.applyTo(RestFn.java:140)
at clojure.core$apply.invokeStatic(core.clj:669)
at clojure.core$require.invokeStatic(core.clj:6066)
at clojure.core$require.doInvoke(core.clj:6066)
at clojure.lang.RestFn.invoke(RestFn.java:554)
at metabase.settings.models.setting.cache$loading__6814__auto____46601.invoke(cache.clj:1)
at metabase.settings.models.setting.cache__init.load(Unknown Source)
at metabase.settings.models.setting.cache__init.(Unknown Source)
at java.base/java.lang.Class.forName0(Native Method)
at java.base/java.lang.Class.forName(Class.java:534)
at java.base/java.lang.Class.forName(Class.java:513)
at clojure.lang.RT.classForName(RT.java:2229)
at clojure.lang.RT.classForName(RT.java:2238)
at clojure.lang.RT.loadClassForName(RT.java:2257)
at clojure.lang.RT.load(RT.java:469)
at clojure.lang.RT.load(RT.java:444)
at clojure.core$load$fn__6933.invoke(core.clj:6189)
at clojure.core$load.invokeStatic(core.clj:6188)
at clojure.core$load.doInvoke(core.clj:6172)
at clojure.lang.RestFn.invoke(RestFn.java:411)
at clojure.core$load_one.invokeStatic(core.clj:5961)
at clojure.core$load_one.invoke(core.clj:5956)
at clojure.core$load_lib$fn__6875.invoke(core.clj:6003)
at clojure.core$load_lib.invokeStatic(core.clj:6002)
at clojure.core$load_lib.doInvoke(core.clj:5981)
at clojure.lang.RestFn.applyTo(RestFn.java:145)
at clojure.core$apply.invokeStatic(core.clj:669)
at clojure.core$load_libs.invokeStatic(core.clj:6044)
at clojure.core$load_libs.doInvoke(core.clj:6028)
at clojure.lang.RestFn.applyTo(RestFn.java:140)
at clojure.core$apply.invokeStatic(core.clj:669)
at clojure.core$require.invokeStatic(core.clj:6066)
at clojure.core$require.doInvoke(core.clj:6066)
at clojure.lang.RestFn.invoke(RestFn.java:3897)
at metabase.settings.models.setting$loading__6814__auto____46652.invoke(setting.clj:1)
at metabase.settings.models.setting__init.load(Unknown Source)
at metabase.settings.models.setting__init.(Unknown Source)
at java.base/java.lang.Class.forName0(Native Method)
at java.base/java.lang.Class.forName(Class.java:534)
at java.base/java.lang.Class.forName(Class.java:513)
at clojure.lang.RT.classForName(RT.java:2229)
at clojure.lang.RT.classForName(RT.java:2238)
at clojure.lang.RT.loadClassForName(RT.java:2257)
at clojure.lang.RT.load(RT.java:469)
at clojure.lang.RT.load(RT.java:444)
at clojure.core$load$fn__6933.invoke(core.clj:6189)
at clojure.core$load.invokeStatic(core.clj:6188)
at clojure.core$load.doInvoke(core.clj:6172)
at clojure.lang.RestFn.invoke(RestFn.java:411)
at clojure.core$load_one.invokeStatic(core.clj:5961)
at clojure.core$load_one.invoke(core.clj:5956)
at clojure.core$load_lib$fn__6875.invoke(core.clj:6003)
at clojure.core$load_lib.invokeStatic(core.clj:6002)
at clojure.core$load_lib.doInvoke(core.clj:5981)
at clojure.lang.RestFn.applyTo(RestFn.java:145)
at clojure.core$apply.invokeStatic(core.clj:669)
at clojure.core$load_libs.invokeStatic(core.clj:6044)
at clojure.core$load_libs.doInvoke(core.clj:6028)
at clojure.lang.RestFn.applyTo(RestFn.java:140)
at clojure.core$apply.invokeStatic(core.clj:669)
at clojure.core$require.invokeStatic(core.clj:6066)
at clojure.core$require.doInvoke(core.clj:6066)
at clojure.lang.RestFn.invoke(RestFn.java:485)
at metabase.settings.core$loading__6814__auto____47272.invoke(core.clj:1)
at metabase.settings.core__init.load(Unknown Source)
at metabase.settings.core__init.(Unknown Source)
at java.base/java.lang.Class.forName0(Native Method)
at java.base/java.lang.Class.forName(Class.java:534)
at java.base/java.lang.Class.forName(Class.java:513)
at clojure.lang.RT.classForName(RT.java:2229)
at clojure.lang.RT.classForName(RT.java:2238)
at clojure.lang.RT.loadClassForName(RT.java:2257)
at clojure.lang.RT.load(RT.java:469)
at clojure.lang.RT.load(RT.java:444)
at clojure.core$load$fn__6933.invoke(core.clj:6189)
at clojure.core$load.invokeStatic(core.clj:6188)
at clojure.core$load.doInvoke(core.clj:6172)
at clojure.lang.RestFn.invoke(RestFn.java:411)
at clojure.core$load_one.invokeStatic(core.clj:5961)
at clojure.core$load_one.invoke(core.clj:5956)
at clojure.core$load_lib$fn__6875.invoke(core.clj:6003)
at clojure.core$load_lib.invokeStatic(core.clj:6002)
at clojure.core$load_lib.doInvoke(core.clj:5981)
at clojure.lang.RestFn.applyTo(RestFn.java:145)
at clojure.core$apply.invokeStatic(core.clj:669)
at clojure.core$load_libs.invokeStatic(core.clj:6044)
at clojure.core$load_libs.doInvoke(core.clj:6028)
at clojure.lang.RestFn.applyTo(RestFn.java:140)
at clojure.core$apply.invokeStatic(core.clj:669)
at clojure.core$require.invokeStatic(core.clj:6066)
at clojure.core$require.doInvoke(core.clj:6066)
at clojure.lang.RestFn.invoke(RestFn.java:554)
at metabase.appearance.settings$loading__6814__auto____49882.invoke(settings.clj:1)
at metabase.appearance.settings__init.load(Unknown Source)
at metabase.appearance.settings__init.(Unknown Source)
at java.base/java.lang.Class.forName0(Native Method)
at java.base/java.lang.Class.forName(Class.java:534)
at java.base/java.lang.Class.forName(Class.java:513)
at clojure.lang.RT.classForName(RT.java:2229)
at clojure.lang.RT.classForName(RT.java:2238)
at clojure.lang.RT.loadClassForName(RT.java:2257)
at clojure.lang.RT.load(RT.java:469)
at clojure.lang.RT.load(RT.java:444)
at clojure.core$load$fn__6933.invoke(core.clj:6189)
at clojure.core$load.invokeStatic(core.clj:6188)
at clojure.core$load.doInvoke(core.clj:6172)
at clojure.lang.RestFn.invoke(RestFn.java:411)
at clojure.core$load_one.invokeStatic(core.clj:5961)
at clojure.core$load_one.invoke(core.clj:5956)
at clojure.core$load_lib$fn__6875.invoke(core.clj:6003)
at clojure.core$load_lib.invokeStatic(core.clj:6002)
at clojure.core$load_lib.doInvoke(core.clj:5981)
at clojure.lang.RestFn.applyTo(RestFn.java:145)
at clojure.core$apply.invokeStatic(core.clj:669)
at clojure.core$load_libs.invokeStatic(core.clj:6044)
at clojure.core$load_libs.doInvoke(core.clj:6028)
at clojure.lang.RestFn.applyTo(RestFn.java:140)
at clojure.core$apply.invokeStatic(core.clj:669)
at clojure.core$require.invokeStatic(core.clj:6066)
at clojure.core$require.doInvoke(core.clj:6066)
at clojure.lang.RestFn.invoke(RestFn.java:424)
at metabase.appearance.core$loading__6814__auto____50083.invoke(core.clj:1)
at metabase.appearance.core__init.load(Unknown Source)
at metabase.appearance.core__init.(Unknown Source)
at java.base/java.lang.Class.forName0(Native Method)
at java.base/java.lang.Class.forName(Class.java:534)
at java.base/java.lang.Class.forName(Class.java:513)
at clojure.lang.RT.classForName(RT.java:2229)
at clojure.lang.RT.classForName(RT.java:2238)
at clojure.lang.RT.loadClassForName(RT.java:2257)
at clojure.lang.RT.load(RT.java:469)
at clojure.lang.RT.load(RT.java:444)
at clojure.core$load$fn__6933.invoke(core.clj:6189)
at clojure.core$load.invokeStatic(core.clj:6188)
at clojure.core$load.doInvoke(core.clj:6172)
at clojure.lang.RestFn.invoke(RestFn.java:411)
at clojure.core$load_one.invokeStatic(core.clj:5961)
at clojure.core$load_one.invoke(core.clj:5956)
at clojure.core$load_lib$fn__6875.invoke(core.clj:6003)
at clojure.core$load_lib.invokeStatic(core.clj:6002)
at clojure.core$load_lib.doInvoke(core.clj:5981)
at clojure.lang.RestFn.applyTo(RestFn.java:145)
at clojure.core$apply.invokeStatic(core.clj:669)
at clojure.core$load_libs.invokeStatic(core.clj:6044)
at clojure.core$load_libs.doInvoke(core.clj:6028)
at clojure.lang.RestFn.applyTo(RestFn.java:140)
at clojure.core$apply.invokeStatic(core.clj:669)
at clojure.core$require.invokeStatic(core.clj:6066)
at clojure.core$require.doInvoke(core.clj:6066)
at clojure.lang.RestFn.invoke(RestFn.java:622)
at metabase.analytics.settings$loading__6814__auto____51869.invoke(settings.clj:1)
at metabase.analytics.settings__init.load(Unknown Source)
at metabase.analytics.settings__init.(Unknown Source)
at java.base/java.lang.Class.forName0(Native Method)
at java.base/java.lang.Class.forName(Class.java:534)
at java.base/java.lang.Class.forName(Class.java:513)
at clojure.lang.RT.classForName(RT.java:2229)
at clojure.lang.RT.classForName(RT.java:2238)
at clojure.lang.RT.loadClassForName(RT.java:2257)
at clojure.lang.RT.load(RT.java:469)
at clojure.lang.RT.load(RT.java:444)
at clojure.core$load$fn__6933.invoke(core.clj:6189)
at clojure.core$load.invokeStatic(core.clj:6188)
at clojure.core$load.doInvoke(core.clj:6172)
at clojure.lang.RestFn.invoke(RestFn.java:411)
at clojure.core$load_one.invokeStatic(core.clj:5961)
at clojure.core$load_one.invoke(core.clj:5956)
at clojure.core$load_lib$fn__6875.invoke(core.clj:6003)
at clojure.core$load_lib.invokeStatic(core.clj:6002)
at clojure.core$load_lib.doInvoke(core.clj:5981)
at clojure.lang.RestFn.applyTo(RestFn.java:145)
at clojure.core$apply.invokeStatic(core.clj:669)
at clojure.core$load_libs.invokeStatic(core.clj:6044)
at clojure.core$load_libs.doInvoke(core.clj:6028)
at clojure.lang.RestFn.applyTo(RestFn.java:140)
at clojure.core$apply.invokeStatic(core.clj:669)
at clojure.core$require.invokeStatic(core.clj:6066)
at clojure.core$require.doInvoke(core.clj:6066)
at clojure.lang.RestFn.invoke(RestFn.java:1526)
at metabase.analytics.prometheus$loading__6814__auto____53343.invoke(prometheus.clj:1)
at metabase.analytics.prometheus__init.load(Unknown Source)
at metabase.analytics.prometheus__init.(Unknown Source)
at java.base/java.lang.Class.forName0(Native Method)
at java.base/java.lang.Class.forName(Class.java:534)
at java.base/java.lang.Class.forName(Class.java:513)
at clojure.lang.RT.classForName(RT.java:2229)
at clojure.lang.RT.classForName(RT.java:2238)
at clojure.lang.RT.loadClassForName(RT.java:2257)
at clojure.lang.RT.load(RT.java:469)
at clojure.lang.RT.load(RT.java:444)
at clojure.core$load$fn__6933.invoke(core.clj:6189)
at clojure.core$load.invokeStatic(core.clj:6188)
at clojure.core$load.doInvoke(core.clj:6172)
at clojure.lang.RestFn.invoke(RestFn.java:411)
at clojure.core$load_one.invokeStatic(core.clj:5961)
at clojure.core$load_one.invoke(core.clj:5956)
at clojure.core$load_lib$fn__6875.invoke(core.clj:6003)
at clojure.core$load_lib.invokeStatic(core.clj:6002)
at clojure.core$load_lib.doInvoke(core.clj:5981)
at clojure.lang.RestFn.applyTo(RestFn.java:145)
at clojure.core$apply.invokeStatic(core.clj:669)
at clojure.core$load_libs.invokeStatic(core.clj:6044)
at clojure.core$load_libs.doInvoke(core.clj:6028)
at clojure.lang.RestFn.applyTo(RestFn.java:140)
at clojure.core$apply.invokeStatic(core.clj:669)
at clojure.core$require.invokeStatic(core.clj:6066)
at clojure.core$require.doInvoke(core.clj:6066)
at clojure.lang.RestFn.invoke(RestFn.java:554)
at metabase.analytics.core$loading__6814__auto____55361.invoke(core.clj:1)
at metabase.analytics.core__init.load(Unknown Source)
at metabase.analytics.core__init.(Unknown Source)
at java.base/java.lang.Class.forName0(Native Method)
at java.base/java.lang.Class.forName(Class.java:534)
at java.base/java.lang.Class.forName(Class.java:513)
at clojure.lang.RT.classForName(RT.java:2229)
at clojure.lang.RT.classForName(RT.java:2238)
at clojure.lang.RT.loadClassForName(RT.java:2257)
at clojure.lang.RT.load(RT.java:469)
at clojure.lang.RT.load(RT.java:444)
at clojure.core$load$fn__6933.invoke(core.clj:6189)
at clojure.core$load.invokeStatic(core.clj:6188)
at clojure.core$load.doInvoke(core.clj:6172)
at clojure.lang.RestFn.invoke(RestFn.java:411)
at clojure.core$load_one.invokeStatic(core.clj:5961)
at clojure.core$load_one.invoke(core.clj:5956)
at clojure.core$load_lib$fn__6875.invoke(core.clj:6003)
at clojure.core$load_lib.invokeStatic(core.clj:6002)
at clojure.core$load_lib.doInvoke(core.clj:5981)
at clojure.lang.RestFn.applyTo(RestFn.java:145)
at clojure.core$apply.invokeStatic(core.clj:669)
at clojure.core$load_libs.invokeStatic(core.clj:6044)
at clojure.core$load_libs.doInvoke(core.clj:6028)
at clojure.lang.RestFn.applyTo(RestFn.java:140)
at clojure.core$apply.invokeStatic(core.clj:669)
at clojure.core$require.invokeStatic(core.clj:6066)
at clojure.core$require.doInvoke(core.clj:6066)
at clojure.lang.RestFn.invoke(RestFn.java:3897)
at metabase.core.core$loading__6814__auto____125762.invoke(core.clj:1)
at metabase.core.core__init.load(Unknown Source)
at metabase.core.core__init.(Unknown Source)
at java.base/java.lang.Class.forName0(Native Method)
at java.base/java.lang.Class.forName(Class.java:534)
at java.base/java.lang.Class.forName(Class.java:513)
at clojure.lang.RT.classForName(RT.java:2229)
at clojure.lang.RT.classForName(RT.java:2238)
at clojure.lang.RT.loadClassForName(RT.java:2257)
at clojure.lang.RT.load(RT.java:469)
at clojure.lang.RT.load(RT.java:444)
at clojure.core$load$fn__6933.invoke(core.clj:6189)
at clojure.core$load.invokeStatic(core.clj:6188)
at clojure.core$load.doInvoke(core.clj:6172)
at clojure.lang.RestFn.invoke(RestFn.java:411)
at clojure.core$load_one.invokeStatic(core.clj:5961)
at clojure.core$load_one.invoke(core.clj:5956)
at clojure.core$load_lib$fn__6875.invoke(core.clj:6003)
at clojure.core$load_lib.invokeStatic(core.clj:6002)
at clojure.core$load_lib.doInvoke(core.clj:5981)
at clojure.lang.RestFn.applyTo(RestFn.java:145)
at clojure.core$apply.invokeStatic(core.clj:669)
at clojure.core$load_libs.invokeStatic(core.clj:6044)
at clojure.core$load_libs.doInvoke(core.clj:6028)
at clojure.lang.RestFn.applyTo(RestFn.java:140)
at clojure.core$apply.invokeStatic(core.clj:669)
at clojure.core$require.invokeStatic(core.clj:6066)
at clojure.core$require.doInvoke(core.clj:6066)
at clojure.lang.RestFn.applyTo(RestFn.java:140)
at clojure.core$apply.invokeStatic(core.clj:667)
at clojure.core$serialized_require.invokeStatic(core.clj:6142)
at clojure.core$requiring_resolve.invokeStatic(core.clj:6151)
at clojure.core$requiring_resolve.invoke(core.clj:6145)
at metabase.core.bootstrap$_main.invokeStatic(bootstrap.clj:36)
at metabase.core.bootstrap$_main.doInvoke(bootstrap.clj:29)
at clojure.lang.RestFn.invoke(RestFn.java:400)
at clojure.lang.AFn.applyToHelper(AFn.java:152)
at clojure.lang.RestFn.applyTo(RestFn.java:135)
at metabase.core.bootstrap.main(Unknown Source)

dwhitemv · November 13, 2025, 8:38pm

If you don’t need to verify the server certificate (doing so is Difficult and requires knowing how the Java truststore works), use a JDBC string like so (replace things that start with “my_” with your data):

jdbc:mysql://my_databaseserver:3306/my_metabaseappdbname?user=my_metabaseuser&password=my_password&useSsl=true&trustServerCertificate=true

Metabase uses an old version of the MariaDB Connector/J that uses the legacy useSsl behavior, not current versions or the MySQL Connector/J, so make sure you are referencing the correct instructions.

Zenior · November 14, 2025, 7:12am

Thanks @dwhitemv , I tried the old ssl properties you specified, but with the same result. The only difference now is I use the environment variables for user and password.

I then added those properties to the string aswel for testing, but again the same result. The start of the error below seems to state it doesn’t recognize the string as being for a mysql db-type?

Exception in thread "main" java.lang.AssertionError: Assert failed: (#{:postgres :h2 :mysql} db-type)
at metabase.app_db.connection$application_db.invokeStatic(connection.clj:64)

dwhitemv · November 14, 2025, 7:24am

That assert is checking the types of app database. Is MB_DB_TYPE set to ‘mysql’?

This is the set of variables I start up my test Metabase on mysql 8.0.x environment with. The app db and user are both ‘metabase’. I also run this instance on a non-standard port.

export MB_DB_TYPE=mysql
export MB_DB_CONNECTION_URI='jdbc:mysql://my_database_server:3306/metabase?user=metabase&password=my_password&useSsl=true&trustServerCertificate=true'
export MB_EMOJI_IN_LOGS=false
export MB_COLORIZE_LOGS=false
export MB_ENCRYPTION_SECRET_KEY="my_secret_key"
export MB_JETTY_HOST="127.0.0.1"
export MB_JETTY_PORT="4000"

Zenior · November 14, 2025, 7:40am

I thought the jdbc:mysql part of the string would have done that, but I did test it now with the env-var. I now use the first two vars from your set, but still the same error.

Does single/double quotes mean anything here?

My DB is MariaDB, maybe that changes anything, not according to the Metabase help

Zenior · November 14, 2025, 7:52am

I did a test with all your env-vars, setting the key to a random “abcdefghijklmnop“, but still the same error. I thought trusting the server, I wouldn’t need to provice a key?

Zenior · November 14, 2025, 8:43am

The database I’m connecting to was created before the server got a SSL certificate, maybe that is of interest? The help states that DB’s from before setting MB_ENCRYPTION_SECRET_KEY will work as before. That’s another reason I didn’t set this key until last test.

Zenior · November 14, 2025, 3:05pm

I now have Metabase running on a machine with a local H2 db (default installation). When I now want to connect to a database on the MariaDB server with SSL, it only works with this string in the “Additional JDBC connection string options” field:

useSSL=true&verifyServerCertificate=true&trustServerCertificate=true

Using this in MB_DB_CONNECTION_URI and starting Metabase using the application database on this MariaDB still results in the same error.

dwhitemv · November 14, 2025, 3:36pm

MB_ENCRYPTION_SECRET_KEY has nothing to do with connecting to the app database, it only encrypts connection details for databases Metabase connects to.

Your exception is different than what I get if the parameters are misconfigured and SSL is mandatory. In your case it seems MB_DB_TYPE is changing or invalidated somewhere along the call chain and the assert hits it.

Have you checked if there is differences in the user if connecting with SSL versus connecting without? MySQL/MariaDB support variant user profiles depending if SSL is in use or not. If the SSL-using user has no access to its tables Metabase could get unexpectedly grumpy.

Also, what version of Metabase are you running?

Zenior · November 14, 2025, 11:03pm

How would I test if users with and without SSL differ if I can’t connect to the server. I have little control over the server which wants me to use SSL. I used to connect to it without, but now they have SSL installed and I can’t.

dwhitemv · November 15, 2025, 6:35am

What version of Metabase are you running?

You said you can connect to the app database with VS Code; use that, or any other MySQL compatible client. Connect using your Metabase app database username and password and make sure you can query all the tables.

You said you don’t control the app database server. Who does? Is it run by your corporate IT team, or are you using a third-party service like AWS RDS?

Zenior · November 15, 2025, 9:24pm

Version is: 11.8.3-MariaDB-deb12.

The DB is running on external servers of a provider. I could talk to them and ask for help offcourse, but I thought this would be an easy question for this forum ;-).

I didn’t know about different users depending the SLL setting, might have a look at that.

Zenior · December 9, 2025, 1:59pm

Woow, it was very simple. Isn’t it allway after you find the solution ;-). In a Windows .bat file & characters need to be escaped with a ^ like example below. That did half of the trick, after that, the java call had to embed the MB_DB_CONNECTION_URI env-var in quotes. Maybe someone can make a simpler solution knowing these rules, but it’s now working for me.

dwhitemv · December 9, 2025, 4:18pm

Glad you found it, and thanks for the tip. I come from the UNIX side and are just used to how UNIX shells handle metacharacters in strings, but it can get complicated with multiple substitutions.

system · December 12, 2025, 4:18pm

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.