Using SSL Connections

• To use SSL connections between the MySQL server and client programs, the system must support either OpenSSL or yaSSL.
  • MySQL must be built with SSL support.
  • MySQL now comes bundled with yaSSL.

• To check whether a server binary is compiled with SSL support, invoke it with the --ssl option.

  mysqld --ssl --help

  • An error will occur if the server does not support SSL.

• To check whether a running mysqld server supports SSL, examine the value of the have_openssl system variable.

  mysql> SHOW VARIABLES LIKE 'have_openssl';

  • If the returned value is YES, the server supports SSL connections.
  • If the returned value is DISABLED, the server supports SSL connections but was not started with the appropriate options.

• SSL support must be configured if compiling MySQL from source.
  • For yaSSL:

    ./configure --with-yassl

  • OpenSSL:

    ./configure --with-openssl

How do I allow clients to connect via SSL?

---

---

© 2007 John Michael Pierobon

Notes