Comments on: Simplified MySQL SSL connections

By: MySQL PAM and Active Directory authentication

MySQL PAM and Active Directory authentication — Thu, 06 Jun 2013 23:03:41 +0000

[...] very well designed a secure environment to access your database wherever be the location, a VPN or SSL is always a requirement to go forward to the next step in this article as passwords are sent in [...]

By: Mark Grennan

Mark Grennan — Mon, 29 Apr 2013 17:02:04 +0000

To keep you data secure you only need Server certs. Client certs are to validate your clients. If you trust who is connecting to your servers (ID and Passwords are enough) you don’t need client certs.

By: Do I need client certs for mysql ssl replication? | Question and Answer

Do I need client certs for mysql ssl replication? | Question and Answer — Mon, 29 Apr 2013 16:02:09 +0000

[...] first one creates both client and server certs, while the second one only creates server [...]

By: Sheeri

Sheeri — Wed, 23 Nov 2011 18:27:31 +0000

This is exactly why I love doing podcasts — people take what we do and give us feedback, or run with it and go further.

It warms my heart to know I helped inspire you! I think I’m a fangirl of MySQL Fanboy!

By: Simplified MySQL SSL connections « DbRunas – Noticias y Recursos sobre Bases de Datos

Wed, 23 Nov 2011 12:53:37 +0000

[...] http://www.mysqlfanboy.com/?p=712 November 23, 2011 // MySQL // No Comments // [...]

By: peter_laursen

peter_laursen — Wed, 23 Nov 2011 08:30:57 +0000

A comment to ” ..you need to tell the client to use SSL. Edit your user’s .my.cnf file and give it the keys too .. /.my.cnf .. [client].

Not all clients will use the [client] section of the options file. For instance clients connecting from remote hosts cannot. So in such case the client would/should have its own interface to specify SSH-parameters.

By: Jonathan Levin

Jonathan Levin — Wed, 23 Nov 2011 08:25:27 +0000

Not to add to the confusion, but I found that REQUIRE SSL allowed you to use any certificate file and when I user REQUIRE X509, it required you to use the actual certificate and key file. Maybe it was just me..