Revision as of 23:58, 12 May 2010

MySQL

MySQL server with SSL

1. Create a certificate as described in OpenSSL section.
2. Add the following under each directive on `/etc/my.cnf`, if the directive doesn't exists it should be created

 [client]
 ssl-ca=/etc/pki/openssl/cacert.pem
 ssl-cert=/etc/pki/openssl/client-cert.pem
 ssl-key=/etc/pki/openssl/client-key.pem

 [mysqld]
 ssl-ca=/etc/pki/openssl/cacert.pem
 ssl-cert=/etc/pki/openssl/server-cert.pem
 ssl-key=/etc/pki/openssl/server-key.pem
 

1. Restart the server

 service mysqld restart
 

1. Test ssl on Mysql
   1. Login into MySQL Server

  mysql -u root -p
  

1. Check SSL Cipher

  mysql> show status like 'Ssl_cipher';
  +--------------+-------------------+
  | Variable_name| Value             |
  +--------------+-------------------+
  | Ssl_cipher   | DHE-RSA-AES256-SHA|
  +--------------+-------------------+

  1 row in set (0.01 sec)
  

1. Done

Master-Master Replication

Good links:

• [[1]]
• [[2]]

InnoDB

When work with this engine don't forget to do a "commit" after any INSERT/UPDATE execution.