Mysql

From Bashlinux
Revision as of 10:56, 20 March 2010 by Manpaz (talk)
Jump to: navigation, search

MySQL

MySQL server with SSL

  1. Create a certificate as described in OpenSSL section.
  2. Add the following under each directive on `/etc/my.cnf`, if the directive doesn't exists it should be created
 [client]
 ssl-ca=/etc/pki/openssl/cacert.pem
 ssl-cert=/etc/pki/openssl/client-cert.pem
 ssl-key=/etc/pki/openssl/client-key.pem

 [mysqld]
 ssl-ca=/etc/pki/openssl/cacert.pem
 ssl-cert=/etc/pki/openssl/server-cert.pem
 ssl-key=/etc/pki/openssl/server-key.pem
 
  1. Restart the server
 service mysqld restart
 
  1. Test ssl on Mysql
    1. Login into MySQL Server
  mysql -u root -p
  
  1. Check SSL Cipher
  mysql> show status like 'Ssl_cipher';
  +--------------+-------------------+
  | Variable_name| Value             |
  +--------------+-------------------+
  | Ssl_cipher   | DHE-RSA-AES256-SHA|
  +--------------+-------------------+

  1 row in set (0.01 sec)
  
  1. Done

Master-Master Replication

Good link: [[1]]

InnoDB

When work with this engine don't forget to do a "commit" after any INSERT/UPDATE execution.