Thanks Filip. That was very helpful. I updated the uaa.yml with useSSL = true. I had to set trustServerCertificate to true as well otherwise it gives a handshake error. 

If i want to validate the MySQL server certificate, then do I just add it to the cacerts truststore of the UAA server ?  

We have  a separate instance of UAA server interacting with the MySQL database running on cloud.gov. Recently, we have been advised to use a TLS connection to connect to the database. After doing some research, we found that the TLS certifciate is setup on the MySQL server. How do I make sure that the UAA server can connect to this MySQL server using TLS ? Is there any any configuration in uaa.yml that I can set ? 

Any help would be appreciated ! 

Thanks, 
Viraj 

Hi, everyone,

Chao Wang, the Project Lead for the UAA team within the Application Runtime PMC, has stepped down from the project, as he has recently left Pivotal. We thank him for his service.

The UAA team, based in San Francisco, now has an opening for its project lead. Project leads must be nominated by a Cloud Foundry Foundation member. Please send nominations directly to me or in reply to this message no later than 11:59 PM PDT on Monday, August 19, 2019.

Also, if you have any questions about the role or the nomination process, as described in the CFF governance documents (https://www.cloudfoundry.org/governance/cff_development_operations_policy/), please let me know.

Thanks,
Eric Malm, CF Application Runtime PMC Lead

[Edited Message Follows]

Thanks Chaos. The doc says to create a custom env logging.config and point to log4j2 format file. Just like in the previous versions, why can we not get the logging by default ? 

Should I just create a custom log4j2.properties config file ? Is there an example of one that I can use ? The UAA war file does not contain a log4j2.properties otherwise i could have pointed to that. 

What is the best way to do this ? I am using the cloudfoundry environment, so I can't just push a log4j2.properties file. 

Thanks,
Viraj