diff options
| author | tonu@x153.internalnet <> | 2001-09-01 06:30:05 +0800 |
|---|---|---|
| committer | tonu@x153.internalnet <> | 2001-09-01 06:30:05 +0800 |
| commit | 9cd207e0cade23711e8b09f798dfca7b982df535 (patch) | |
| tree | 189bf47e7765b6b38a61fa4e3d46e598c420cb94 /SSL | |
| parent | 2d37fa278422669cbbdf1a63009d68480018a50f (diff) | |
| download | mariadb-git-9cd207e0cade23711e8b09f798dfca7b982df535.tar.gz | |
OpenSSL fixes
Diffstat (limited to 'SSL')
| -rw-r--r-- | SSL/NOTES | 27 |
1 files changed, 21 insertions, 6 deletions
diff --git a/SSL/NOTES b/SSL/NOTES index 7d7e68b8593..413c724c583 100644 --- a/SSL/NOTES +++ b/SSL/NOTES @@ -1,8 +1,24 @@ Quick notes: - +-------------------------------------------- +[tonu@x153 mysql-4.0]$ cat /etc/my.cnf +[mysqld] +ssl-ca=SSL/cacert.pem +ssl-cert=SSL/server-cert.pem +ssl-key=SSL/server-key.pem + +[mysql] +ssl-ca=SSL/cacert.pem +ssl-cert=SSL/client-cert.pem +ssl-key=SSL/client-key.pem + +[mysqldump] +ssl-ca=SSL/cacert.pem +ssl-cert=SSL/client-cert.pem +ssl-key=SSL/client-key.pem + +[tonu@x153 mysql-4.0]$ +-------------------------------------------- To remove passwords from keyfiles: - - [tonu@x153 SSL]$ openssl rsa -inform pem < server-req.pem > server-key.pem read RSA key Enter PEM pass phrase: @@ -12,12 +28,10 @@ writing RSA key To run server: sql/mysqld --ssl-ca=SSL/cacert.pem --ssl-cert=SSL/server-cert.pem --ssl-key=SSL/server-key.pem --skip-grant --debug='d:t:O,-' > /tmp/mysqld.trace - -------------------------------------------- To run client: client/mysql --ssl-ca=SSL/cacert.pem --ssl-cert=SSL/server-cert.pem --ssl-key=SSL/server-key.pem --debug='d:t:O,/tmp/client.trace' -h 127.0.0.1 - -------------------------------------------- openssl s_client -host 127.0.0.1 -port 1111 -debug -verify 1 -cert ../SSL/client-cert.pem -key ../SSL/client-key.pem -CAfile ../SSL/cacert.pem -pause -showcerts -state @@ -27,8 +41,9 @@ openssl s_server -port 1111 -cert ../SSL/server-cert.pem -key ../SSL/server-key. +-------------------------------------------- - +CA stuff: [tonu@x153 bin]$ pwd /usr/local/ssl/bin |