Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Migrated to Confluence 5.3

...

No Format
mysql -u root -p
mysql> show variables like "%ssl%";

+---------------+----------------------------+
| Variable_name | Value                      |
+---------------+----------------------------+
| have_openssl  | YES                        |
| have_ssl      | YES                        |
| ssl_ca        | /etc/mysql/ca-cert.pem     |
| ssl_capath    |                            |
| ssl_cert      | /etc/mysql/server-cert.pem |
| ssl_cipher    |                            |
| ssl_key       | /etc/mysql/server-key.pem  |
+---------------+----------------------------+

mysql> \s
...
SSL:          Cipher in use is DHE-RSA-AES256-SHA
...

mysql --ssl --help (help working on ssl)

JDBC with MySQL on SSL

Add this to configure Mifos database properties (local.properties) under Mifos Configuration Locations

Code Block
main.database.params=useUnicode=true&characterEncoding=UTF-8&useSSL=true&requireSSL=true

NOTE: JDK has issue with validating SSL certs, so you may want to add another parameter which will disable validation using verifyServerCertificate=false

To strictly force SSL for a user to connect to mysql use "REQUIRE SSL" with GRANT statement.

http://dev.mysql.com/doc/refman/5.1/en/connector-j-reference-using-ssl.html

...