I have solved this problem. ^_^ On Fri, Dec 12, 2008 at 10:54 AM, Moon's Father <yueliangdao0...@gmail.com>wrote:
> Hi. > I want to know how to connect mysqld with ssl encryption from windows or > linux system. > Any reply will be appreciated. > > Here is my status. > > mysql> status > -------------- > /usr/local/mysql-ytt/bin/mysql Ver 14.14 Distrib 5.1.30, for pc-linux-gnu > (i686) using EditLine wrapper > > Connection id: 4 > Current database: > Current user: r...@localhost > SSL: Cipher in use is DHE-RSA-AES256-SHA > Current pager: stdout > Using outfile: '' > Using delimiter: ; > Server version: 5.1.30-log Source distribution > Protocol version: 10 > Connection: Localhost via UNIX socket > Server characterset: latin1 > Db characterset: latin1 > Client characterset: latin1 > Conn. characterset: latin1 > UNIX socket: /tmp/mysql3309.sock > Uptime: 1 hour 2 min 4 sec > > Threads: 2 Questions: 15 Slow queries: 0 Opens: 15 Flush tables: 1 > Open tables: 8 Queries per second avg: 0.4 > -------------- > > mysql> show variables like '%ssl%'; > +---------------+-----------------------------------------------+ > | Variable_name | Value | > +---------------+-----------------------------------------------+ > | have_openssl | YES | > | have_ssl | YES | > | ssl_ca | /home/david_yeung/ssl/openssl/cacert.pem | > | ssl_capath | | > | ssl_cert | /home/david_yeung/ssl/openssl/server-cert.pem | > | ssl_cipher | | > | ssl_key | /home/david_yeung/ssl/openssl/server-key.pem | > +---------------+-----------------------------------------------+ > 7 rows in set (0.00 sec) > > > Here is my.cnf. > [mysqld] > # SSL options. > ssl-ca=/home/david_yeung/ssl/openssl/cacert.pem > ssl-cert=/home/david_yeung/ssl/openssl/server-cert.pem > ssl-key=/home/david_yeung/ssl/openssl/server-key.pem > [client] > # SSL options. > ssl-ca=/home/david_yeung/ssl/openssl/cacert.pem > ssl-cert=/home/david_yeung/ssl/openssl/client-cert.pem > ssl-key=/home/david_yeung/ssl/openssl/client-key.pem > > > Here is my user. > mysql> show grants for root@'%'; > > +--------------------------------------------------------------------------------------------------------------------------+ > | Grants for r...@% > | > > +--------------------------------------------------------------------------------------------------------------------------+ > | GRANT ALL PRIVILEGES ON *.* TO 'root'@'%' IDENTIFIED BY PASSWORD > '*6BB4837EB74329105EE4568DDA7DC67ED2CA2AD9' REQUIRE SSL | > > +--------------------------------------------------------------------------------------------------------------------------+ > 1 row in set (0.00 sec) > > -- > I'm a MySQL DBA in china. > More about me just visit here: > http://yueliangdao0608.cublog.cn > -- I'm a MySQL DBA in china. More about me just visit here: http://yueliangdao0608.cublog.cn
