I've just done a similar thing. Are you sure that you are running the
mysql client that you have just compiled.
I used the following build options
CFLAGS="-O3" CXX=gcc CXXFLAGS="-O3 -felide-constructors -fno-exceptions
\
-fno-rtti" ./configure \
--enable-assembler \
--enable-local-infile \
--with-mysqld-user=mysql \
--with-unix-socket-path=/var/lib/mysql/mysql.sock \
--prefix=/ \
--with-extra-charsets=complex \
--exec-prefix=/usr \
--libexecdir=/usr/sbin \
--sysconfdir=/etc \
--datadir=/usr/share \
--localstatedir=/var/lib/mysql \
--infodir=/usr/share \
--includedir=/usr/include \
--mandir=/usr \
--with-embedded-server \
--enable-thread-safe-client \
--with-vio \
--with-openssl ;
I nicked this out of the RPM build spec and added the last two options.
Gareth.
On Tue, 2003-06-03 at 16:04, Paul Cunningham wrote:
> Hi,
>
> Please can someone help with advise on setting up a Secure MySQL Connection. The
> details are as follows.
>
> I have built and configured OpenSSL 0.9.7 and MySQL 4.0.12.
> MySQL was configured with the options ....
> ./configure \
> --enable-local-infile \
> --with-vio --with-openssl=/usr/sfw \
> --enable-thread-safe-client --with-pthread \
> --sysconfdir=/etc/sfw/mysql \
> --prefix=/usr/sfw/mysql
>
> I have set up the certificates as described in
> http://www.mysql.com/doc/en/Secure_Create_Certs.html
>
> and ran the mysql daemon as follows .....
>
> CONFF=/export/openssl/my.cnf
> /usr/sfw/mysql/bin/mysqld_safe --defaults-file=${CONFF} --user=mysql &
>
> the contents of /export/openssl/my.cnf being ...
>
> [client]
> ssl-ca=/export/openssl/cacert.pem
> ssl-cert=/export/openssl/client-cert.pem
> ssl-key=/export/openssl/client-key.pem
> [mysqld]
> master-ssl-ca=/export/openssl/cacert.pem
> master-ssl-cert=/export/openssl/server-cert.pem
> master-ssl-key=/export/openssl/server-key.pem
>
> mysqld started okay after changing the [mysqld] entries and added the 'master-'
> bits.
>
> I then tried to run the 'mysql' client as follows ...
>
> /usr/sfw/mysql/bin/mysql --defaults-file=/export/openssl/my.cnf
>
> but this fails with the following ....
>
> /usr/sfw/mysql/bin/mysql: ERROR: unknown variable
> 'ssl-ca=/export/openssl/cacert.pem'
>
> The clients does not seem to like these options either in the my.cnf file or if
> put on the mysql command-line.
>
> Has anyone got any ideas where I am going wrong?
>
> Thanks
> Paul
--
Gareth Davis <[EMAIL PROTECTED]>
Logical Practice Systems Limited
--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe: http://lists.mysql.com/[EMAIL PROTECTED]
