[alesnav]

Problem

When starting misp-core with MYSQL_TLS=true and MYSQL_TLS_CA set (external DB over TLS, e.g. Azure MySQL Flexible / AWS RDS), the container crashes in a loop:

Error: syntax error, unexpected single-quoted string "ssl_ca", expecting "function"

Root cause

core/files/init_misp.sh → update_database_tls_config(). When the TLS key does not yet exist in database.php, it is inserted with:

sed -E "/public[[:space:]]+\$default[[:space:]]*=[[:space:]]*\[/a\
    '${key}' => '${value}',"

The address /public\s+\$default\s*=\s*\[/ is not anchored, and app/Config/database.default.php ships two matching lines:

35:    public $default = [          // active MySQL config
54:    // public $default = [       // commented-out PostgreSQL example

So the a\ (append) runs on both, inserting 'ssl_ca' => '...' inside the commented PostgreSQL block but outside the //, producing invalid PHP and the crash above.

Fix

Anchor the sed address to the start of the line (^[[:space:]]*public) so only the active, non-commented $default block matches:

sed -E "/^[[:space:]]*public[[:space:]]+\$default[[:space:]]*=[[:space:]]*\[/a\
    '${key}' => '${value}',"

One-character-class change, no behaviour change for the normal (single, non-commented) case.

Verification

Tested against the real database.default.php from misp-core:v2.5.50 with php -l:

	ssl_ca insertions	php -l
before (unanchored)	2 (one inside the commented block)	❌ Errors parsing
after (anchored)	1 (active block only)	✅ No syntax errors detected

Reproduces on misp-core 2.5.x with MYSQL_TLS=true + MYSQL_TLS_CA pointing at an externally managed MySQL. Same applies to ssl_cert / ssl_key.

[ostefano]

Please rebase

[alesnav]

branch updated