Maxm at 04:39, 3 February 2016

2016-02-03T04:39:05Z

Maxm: Created page with "Setting up MySQL with SSL allows secure encrypted connections between the MySQL server the MySQL client. This guide will walk you through setting up SSL for MySQL on your VPS...."

2016-02-03T04:13:11Z

Created page with "Setting up MySQL with SSL allows secure encrypted connections between the MySQL server the MySQL client. This guide will walk you through setting up SSL for MySQL on your VPS...."

New page

Setting up MySQL with SSL allows secure encrypted connections between the MySQL server the MySQL client. This guide will walk you through setting up SSL for MySQL on your VPS.

# Generate server and client certificates. You will need to generate 2 certificates pairs, one for the server and one for the client. The official MySQL documentation has a guide on generating the server and client certificates: http://dev.mysql.com/doc/refman/5.7/en/creating-ssl-files-using-openssl.html
#Once your certificates are generated, create a directory on the server to store the server certificates such as C:\MySQL\mysql-ssl (Windows) or /etc/mysql-ssl (Linux) and copy the server-key.pem, server-cert.pem and ca.pem files there.
#Edit the my.ini file (Windows) or my.cnf file (Linux). Under the [mysqld] section add the following:
#:'''my.ini on Windows''' <pre>ssl-ca="C:/MySQL/mysql-ssl/ca-cert.pem"
ssl-cert="C:/MySQL/mysql-ssl/server-cert.pem"
ssl-key="C:/MySQL/mysql-ssl/server-key.pem"</pre>
#:'''my.cnf on Linux'''
#:<pre>ssl-ca=/etc/mysql-ssl/ca-cert.pem
ssl-cert=/etc/mysql-ssl/server-cert.pem
ssl-key=/etc/mysql-ssl/server-key.pem</pre>
#Restart MySQL server
#Test if MySQL now has SSL enabled by running this query at the MySQL Prompt <pre>show global variables like 'have_%ssl';</pre>
#If you get the following output, it means SSL is properly enabled on your MySQL server <pre>mysql> show global variables like 'have_%ssl';
+---------------+-------+
| Variable_name | Value |
+---------------+-------+
| have_openssl | YES |
| have_ssl | YES |
+---------------+-------+
2 rows in set (0.00 sec)</pre>
#If the value is not set to yes, you will need to look at the MySQL error log for more information. The MySQL log is normally found in C:\MySQL\data\mysqld.err (Windows) or /var/log/mysqld.log (Linux).
#To create a user that can only connect to your MySQL server using SSL, run the following query at the MySQL prompt: <pre>GRANT ALL PRIVILEGES ON *.* TO `user_name`@`%` IDENTIFIED BY 'password' REQUIRE SSL;</pre>
#You will need to use the generated client certificate/key pairs (from Step 1) to be connect MySQL using SSL

[[Category: MySQL]]
[[Category: VPS]]

@@ Line 4: / Line 4: @@
 #Once your certificates are generated, create a directory on the server to store the server certificates such as C:\MySQL\mysql-ssl (Windows) or /etc/mysql-ssl (Linux) and copy the server-key.pem, server-cert.pem and ca.pem files there.
 #Edit the my.ini file (Windows) or my.cnf file (Linux). Under the [mysqld] section add the following:
-#:'''my.ini on Windows''' <pre>ssl-ca="C:/MySQL/mysql-ssl/ca-cert.pem"&#10;ssl-cert="C:/MySQL/mysql-ssl/server-cert.pem"&#10;ssl-key="C:/MySQL/mysql-ssl/server-key.pem"</pre>
+#:'''my.ini on Windows''' <pre>ssl-ca="C:/MySQL/mysql-ssl/ca.pem"&#10;ssl-cert="C:/MySQL/mysql-ssl/server-cert.pem"&#10;ssl-key="C:/MySQL/mysql-ssl/server-key.pem"</pre>
 #:'''my.cnf on Linux'''
-#:<pre>ssl-ca=/etc/mysql-ssl/ca-cert.pem&#10;ssl-cert=/etc/mysql-ssl/server-cert.pem&#10;ssl-key=/etc/mysql-ssl/server-key.pem</pre>
+#:<pre>ssl-ca=/etc/mysql-ssl/ca.pem&#10;ssl-cert=/etc/mysql-ssl/server-cert.pem&#10;ssl-key=/etc/mysql-ssl/server-key.pem</pre>
 #Restart MySQL server
 #Test if MySQL now has SSL enabled by running this query at the MySQL Prompt <pre>show global variables like 'have_%ssl';</pre>

MySQL SSL - Revision history

Maxm at 04:39, 3 February 2016

Maxm: Created page with "Setting up MySQL with SSL allows secure encrypted connections between the MySQL server the MySQL client. This guide will walk you through setting up SSL for MySQL on your VPS...."