适用范围

适用于linux平台下配置mysql 8.0 ssl加密连接

方案概述

使用OpenSSL生成密钥和证书，然后在mysql服务端和客户端配置使用ssl加密的方式登录

实施步骤

前置准备

1.已配置mysql 8.0库且运行正常

配置步骤

1.生成CA密钥

openssl genrsa 2048 > ca-key.pem

2.生成密钥对应的证书

openssl req -new -x509 -nodes -days 36500 -key ca-key.pem -out ca-cert.pem

3.输入证书信息

Country Name (2 letter code) [AU]:CN
State or Province Name (full name) [Some-State]:XJ
Locality Name (eg, city) []:Urumqi
Organization Name (eg, company) [Internet Widgits Pty Ltd]:test
Organizational Unit Name (eg, section) []:mysql
Common Name (e.g. server FQDN or YOUR name) []:mysql admin
Email Address []:test@test.com

4.生成服务端密钥

openssl req -newkey rsa:2048 -days 36500 -nodes -keyout server-key.pem -out server-req.pem

5.输入证书信息