Difference between revisions of "MySQL - Setting Up ODBC and SSL"
From All n One's bxp software Wixi
Philip Lacey (talk | contribs) |
Philip Lacey (talk | contribs) |
||
| Line 18: | Line 18: | ||
Right click on the the command window tool and select "Run as Administrator" | Right click on the the command window tool and select "Run as Administrator" | ||
| − | Run as follows and make absolutely sure the common name is different for each one. | + | Run as follows and make absolutely sure the '''common name''' is different for each one. |
<code> | <code> | ||
| Line 33: | Line 33: | ||
*Organization Name: All n One Limited | *Organization Name: All n One Limited | ||
*Organizational Unit Name : BXP | *Organizational Unit Name : BXP | ||
| − | *'''Common name: | + | *'''Common name: mydomainname.ie''' |
| − | *Email Address: daniel@ | + | *Email Address: daniel@mydomainname.ie |
| + | |||
| + | <code> | ||
| + | openssl req -newkey rsa:2048 -days 24800 -nodes -keyout "C:/MySQLSSLCert/server-key.pem" > "C:/MySQLSSLCert/server-req.pem" | ||
| + | </code> | ||
| + | |||
| + | *Country Name : IE | ||
| + | *State or Province Name : Leinster | ||
| + | *Locality Name: Dublin | ||
| + | *Organization Name: All n One Limited | ||
| + | *Organizational Unit Name : BXP | ||
| + | *'''Common name: myotherdomainname.ie''' | ||
| + | *Email Address: daniel@mydomainname.ie | ||
| + | |||
| + | '''A challenge password: password''' | ||
| + | '''Optional name can be entered: All n One Limited''' | ||
Revision as of 14:51, 23 October 2014
Database encryption is an important security measure and with SSL we can ensure end to end encryption.
1 Step 1: Get Open SSL onto the database server.
Open SSL is free and can be downloaded from the following link http://www.openssl.org/. Once this is installed add it to your system variables path. This can be done as follows:
- Right click my computer
- Go to properties
- Then advanced system settings
- next click environment variables
- add to the path: C:\OpenSSL-Win64\bin; or similar depending on your system.
2 Step 2: Create the certs
Create a directory on the C drive like C:\MySQLSSLCerts
Next you will need to open a command window as the admin of your machine/server. Right click on the the command window tool and select "Run as Administrator"
Run as follows and make absolutely sure the common name is different for each one.
openssl genrsa 2048 > "C:/MySQLSSLCert/ca-key.pem"
openssl req -new -x509 -nodes -days 24800 -key "C:/MySQLSSLCert/ca-key.pem" > "C:/MySQLSSLCert/ca-cert.pem"
- Country Name : IE
- State or Province Name : Leinster
- Locality Name: Dublin
- Organization Name: All n One Limited
- Organizational Unit Name : BXP
- Common name: mydomainname.ie
- Email Address: daniel@mydomainname.ie
openssl req -newkey rsa:2048 -days 24800 -nodes -keyout "C:/MySQLSSLCert/server-key.pem" > "C:/MySQLSSLCert/server-req.pem"
- Country Name : IE
- State or Province Name : Leinster
- Locality Name: Dublin
- Organization Name: All n One Limited
- Organizational Unit Name : BXP
- Common name: myotherdomainname.ie
- Email Address: daniel@mydomainname.ie
A challenge password: password Optional name can be entered: All n One Limited
