MySQL Database Replication With SSL Encryption for Debian Wheezy

Discussion in 'Installation/Configuration' started by MorningCalm, Jun 23, 2013.

  1. MorningCalm

    MorningCalm New Member

    I am trying to setup Mysql Database Replication With SSL Encryption for Debian Wheezy. I followed your howto guide for Debian Squeeze (http://www.howtoforge.com/how-to-se...ication-with-ssl-encryption-on-debian-squeeze), but looks like things changed for Debian Wheezy.

    Problem I am having is enabling SSL on the master. If I add just "ssl" to my.cnf then the output of "show variables like '%ssl%';" is :

    Code:
    +---------------+-------+
    | Variable_name | Value |
    +---------------+-------+
    | have_openssl  | YES   |
    | have_ssl      | YES   |
    | ssl_ca        |       |
    | ssl_capath    |       |
    | ssl_cert      |       |
    | ssl_cipher    |       |
    | ssl_key       |       |
    +---------------+-------+
    7 rows in set (0.00 sec)
    
    but when I add the ssl certs to my.cnf:
    ssl
    ssl-ca=/etc/mysql/newcerts/ca-cert.pem
    ssl-cert=/etc/mysql/newcerts/server-cert.pem
    ssl-key=/etc/mysql/newcerts/server-key.pem

    the output of "show variables like '%ssl%';" is:

    Code:
    ERROR 2006 (HY000): MySQL server has gone away
    No connection. Trying to reconnect...
    Connection id:    132
    Current database: *** NONE ***
    
    +---------------+-------------------------------------+
    | Variable_name | Value                               |
    +---------------+-------------------------------------+
    | have_openssl  | DISABLED                            |
    | have_ssl      | DISABLED                            |
    | ssl_ca        | /etc/mysql/newcerts/ca-cert.pem     |
    | ssl_capath    |                                     |
    | ssl_cert      | /etc/mysql/newcerts/server-cert.pem |
    | ssl_cipher    |                                     |
    | ssl_key       | /etc/mysql/newcerts/server-key.pem  |
    +---------------+-------------------------------------+
    7 rows in set (0.00 sec)
    
    I can connect from slave to master if I use mysql user that isn't required to login using ssl. Can you help me out?
     
    Last edited: Jun 23, 2013

Share This Page