Hello!

I'm using MySQL 4.0.18 on a SuSE 9.0 machine.
I compiled it with

./configure             \
--with-vio                      \
--with-openssl          \
--without-debug         \
--without-bench         \
--enable-assembler

I've created the certs & keys with the following commands:

openssl req -new -x509 -keyout $PRIV/cakey.pem -out $DIR/cacert.pem -config
$DIR/openssl.cnf openssl req -new -keyout $DIR/server-key.pem -out
$DIR/server-req.pem -days 730 -config $DIR/openssl.cnf openssl rsa -in
$DIR/server-key.pem -out $DIR/server-key.pem openssl ca  -policy
policy_anything -out $DIR/server-cert.pem -config $DIR/openssl.cnf -infiles
$DIR/server-req.pem openssl req -new -keyout $DIR/client-key.pem -out
$DIR/client-req.pem -days 730 -config $DIR/openssl.cnf openssl rsa -in
$DIR/client-key.pem -out $DIR/client-key.pem openssl ca  -policy
policy_anything -out $DIR/client-cert.pem -config $DIR/openssl.cnf -infiles
$DIR/client-req.pem

My /etc/my.cnf looks like this:

--- /etc/my.cnf ----------------------------------------
[client]
ssl-ca=/etc/mysql/cacert.pem
ssl-cert=/etc/mysql/client-cert.pem
ssl-key=/etc/mysql/client-key.pem
socket=/dat1/srv/chroot/mysqld/tmp/mysql.sock

[mysqld]
port=3306
user=mysql
safe-show-database
skip-symlink
safe-user-create
log=/var/log/mysql/mysql.log
log-slow-queries=/var/log/mysql/slow_queries.log
ssl
ssl-ca=/etc/mysql/cacert.pem
ssl-cert=/etc/mysql/server-cert.pem
ssl-key=/etc/mysql/server-key.pem
set-variable=local-infile=0
-- EOF ------------------------------------------------

SSL connections worked fine for a cuple of hours, but then I get this SSL
error:

ERROR 2026: SSL connection error

When I delete the certs & keys and creating them again, all works fine for
some time.
But then the same error occurs.

What did I wrong???
It seems, that the certs & keys are vaild only for some hours.

Maybe someone could help me.
Thanks.

Tobias Gunkel
Germany



-- 
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:    http://lists.mysql.com/[EMAIL PROTECTED]

Reply via email to