feat: allow remote skipping ssl for mysql/mariadb

Author: dnwjn

UPGRADING.md

@@ -4,6 +4,11 @@ We aim to make upgrading between versions as smooth as possible, but sometimes i
 This document will outline those steps. And as much as we try to cover all cases, we might miss some. If you come
 across such a case, please let us know by [opening an issue][issues], or by adding it yourself and creating a pull request.
 
+## v0.8.1
+
+* The `db_skip_ssl` configuration option was added to `environments.*`. This allows for skipping SSL when connecting to
+  the remote database. This flag is only supported by MySQL and MariaDB.
+
 ## v0.8.0
 
 * The namespace for the `AnonymizeUsers` processor was changed. Make sure to update your config file accordingly:

config/environment-importer.php

@@ -24,6 +24,7 @@
     | - db_port: The database port.
     | - db_use_ssh: Whether to use an SSH tunnel to connect to the database.
     | - db_ssh_tunnel_port: The local port to use for the SSH tunnel.
+    | - db_skip_ssl: Whether to skip SSL when connecting to the database. Only supported by MySQL/MariaDB.
     |
     */
 
@@ -43,6 +44,7 @@
             'db_port' => env('LEI_STAGING_DB_PORT', '3306'),
             'db_use_ssh' => (bool) env('LEI_STAGING_DB_USE_SSH', false),
             'db_ssh_tunnel_port' => env('LEI_STAGING_DB_SSH_TUNNEL_PORT', '3307'),
+            'db_skip_ssl' => (bool) env('LEI_STAGING_DB_SKIP_SSL', false),
         ],
 
         'production' => [
@@ -60,6 +62,7 @@
             'db_port' => env('LEI_PRODUCTION_DB_PORT', '3306'),
             'db_use_ssh' => (bool) env('LEI_PRODUCTION_DB_USE_SSH', false),
             'db_ssh_tunnel_port' => env('LEI_PRODUCTION_DB_SSH_TUNNEL_PORT', '3307'),
+            'db_skip_ssl' => (bool) env('LEI_PRODUCTION_DB_SKIP_SSL', false),
         ],
     ],
 

src/Commands/ImportEnvironmentCommand.php

@@ -341,13 +341,20 @@ protected function getDatabaseDumpClient(bool $local = false): MySql
         };
 
         /** @phpstan-ignore-next-line */
-        return $db::create()
+        $client = $db::create()
             ->setHost($local ? DB::getConfig('host') : $this->getEnvironmentConfigValue('db_host'))
             ->setDbName($local ? DB::getConfig('database') : $this->getEnvironmentConfigValue('db_name'))
             ->setUserName($local ? DB::getConfig('username') : $this->getEnvironmentConfigValue('db_username'))
             ->setPassword($local ? DB::getConfig('password') : $this->getEnvironmentConfigValue('db_password'))
             ->setPort($port)
             ->setDumpBinaryPath($this->getConfigValue('db_dump_binary_path', '/usr/bin'));
+
+        // Allow skipping SSL for MySQL/MariaDB connections if configured.
+        if (!$local && $dbType === 'mysql' && $this->getConfigValue('db_skip_ssl', false)) {
+            $client->setSkipSsl();
+        }
+
+        return $client;
     }
 
     /**