Anonymous, bureaucrat, administrator
7,528
edits
Changes
From All n One's bxp software Wixi
no edit summary
This means that SSL is now an optional connection type.
== Step 5: Force users to use SSL ==
Create a Connection into MySQL for the Admin from the Workbench desktop.
Don't turn on SSL.
Log into this and make sure it works.
Run the command, it should come back empty
SHOW STATUS LIKE 'Ssl_cipher';
Log back in as root
Username is The User on you DB, password is your db password.
Adjust accordingly.
GRANT USAGE ON *.* TO 'Username'@'%' identified by 'password' REQUIRE SSL;
Once done, Adminstrator will have to use the SSL connection.
== Step 6: Configure the connection to use SSL ==
If using workbench, edit the connection, on the SSL bit.
[[SQL_Bench.jpg]]
Now, test connection. You'll have to re-enter the password, but it should be fine.
Go in to execute a query
SHOW STATUS LIKE 'Ssl_cipher';
You should get
'Ssl_cipher', 'DHE-RSA-AES256-SHA'
If you want to test with mysql from a dos prompt
Open cmd
<code>
mysql -uUsername -pPassword --ssl-ca=C:/MySQLSSLCert/ca-cert.pem --ssl-cert=C:/MySQLSSLCert/client-cert.pem --ssl-key=C:/MySQLSSLCert/client-key.pem
</code>
That should give a warning that passwords on the command line is a bad idea, but it should work.
