Re: [CentOS] mysql replication - problems

2015-03-13 Thread James B. Byrne
On Thu, March 12, 2015 11:49, Tim Dunphy wrote: > > Ok, yeah I can understand that. I'll correct it. Still need a way to > get SSL enabled however. Any suggestions there? The method we use is to create an application specific directory under /etc/pki and place its certificates and keys in there.

Re: [CentOS] mysql replication - problems

2015-03-12 Thread Tim Dunphy
Hey Alberto, Perfect! Thanks for your response. Moving the certs and keys to an alternate location worked exactly right. Master: MariaDB [(none)]> show variables like '%ssl%'; +---+--+ | Variable_name | Value| +---+-

Re: [CentOS] mysql replication - problems

2015-03-12 Thread Alberto Rivera Laporte
On Thu, Mar 12, 2015 at 10:49 AM Tim Dunphy wrote: > > > > No: /etc/pki/CA should NOT be group writeable. Ditto for > > /etc/pki/tls/cernts and private > > > Ok, yeah I can understand that. I'll correct it. Still need a way to get > SSL enabled however. Any suggestions there? > > I totally misrea

Re: [CentOS] mysql replication - problems

2015-03-12 Thread Alberto Rivera Laporte
On Thu, Mar 12, 2015 at 10:49 AM Tim Dunphy wrote: > > > > No: /etc/pki/CA should NOT be group writeable. Ditto for > > /etc/pki/tls/cernts and private > I agree - Sorry I did not mean to imply that the directory permissions on /etc/pki/CA should be modified. However it was mentioned it as a

Re: [CentOS] mysql replication - problems

2015-03-12 Thread Valeri Galtsev
On Thu, March 12, 2015 10:40 am, m.r...@5-cent.us wrote: > Tim Dunphy wrote: >>> >>> The mysqld process runs as the mysql user. It's parent which is the >>> mysqld_safe runs as the root user. That being said the mysql user >>> needs to have at least read permission to the locations where the ss

Re: [CentOS] mysql replication - problems

2015-03-12 Thread Tim Dunphy
> > No: /etc/pki/CA should NOT be group writeable. Ditto for > /etc/pki/tls/cernts and private Ok, yeah I can understand that. I'll correct it. Still need a way to get SSL enabled however. Any suggestions there? Thanks Tim On Thu, Mar 12, 2015 at 11:40 AM, wrote: > Tim Dunphy wrote: > >> > >>

Re: [CentOS] mysql replication - problems

2015-03-12 Thread m . roth
Tim Dunphy wrote: >> >> The mysqld process runs as the mysql user. It's parent which is the >> mysqld_safe runs as the root user. That being said the mysql user >> needs to have at least read permission to the locations where the ssl files >> are located. By default on Centos the /etc/pki/CA/p

Re: [CentOS] mysql replication - problems

2015-03-12 Thread Tim Dunphy
> > The mysqld process runs as the mysql user. It's parent which is the > mysqld_safe runs as the root user. That being said the mysql user needs > to have at least read permission to the locations where the ssl files are > > located. By default on Centos the /etc/pki/CA/private directory ha

Re: [CentOS] mysql replication - problems

2015-03-12 Thread Alberto Rivera Laporte
On Thu, Mar 12, 2015 at 8:57 AM Tim Dunphy wrote: > Hey everybody, > > I'm trying to get mysql master/slave replication to work under SSL. I've > created the certs for both the slave and the master. I've configured the > master and slave my.cnf. And it does appear that replication is actually >

[CentOS] mysql replication - problems

2015-03-12 Thread Tim Dunphy
Hey everybody, I'm trying to get mysql master/slave replication to work under SSL. I've created the certs for both the slave and the master. I've configured the master and slave my.cnf. And it does appear that replication is actually working. Master is actually MariaDB (version 5.5.41-MariaDB-lo