MySQLSSL - sharedmemory.net

Using SSL with MySQL

Generate the certs
/etc/my.cnf:

[mysqld]
ssl-ca=$DIR/cacert.pem
ssl-cert=$DIR/server-cert.pem
ssl-key=$DIR/server-key.pem

~/my.cnf

[client]
ssl-ca=$DIR/cacert.pem
ssl-cert=$DIR/client-cert.pem
ssl-key=$DIR/client-key.pem

To enforce the use of SSL use the REQUIRE SSL directive.
To check your server is supporting SSL connections:

SHOW VARIABLES LIKE '%ssl';

To use SSL to connect:

mysql --ssl-ca=/etc/pki/tls/cert.pem -uroot

To check the connection is using SSL:

mysql> \s
--------------
mysql  Ver 14.12 Distrib 5.0.51a, for redhat-linux-gnu (i686) using readline 5.0

Connection id:          5
Current database:
Current user:           root@localhost
SSL:                    Cipher in use is DHE-RSA-AES256-SHA
Current pager:          stdout
Using outfile:          ''
Using delimiter:        ;
Server version:         5.0.51a-log MySQL Community Server (GPL)
Protocol version:       10
Connection:             Localhost via UNIX socket
Server characterset:    latin1
Db     characterset:    latin1
Client characterset:    latin1
Conn.  characterset:    latin1
UNIX socket:            /tmp/mysql.sock
Uptime:                 1 min 6 sec

Threads: 1  Questions: 15  Slow queries: 0  Opens: 12  Flush tables: 1  Open tables: 6  Queries per second avg: 0.227
--------------

CategoryLinux CategoryDatabase