How to implement two-way SSL authentication for MySQL database
Configure MySQL Server
3.1 Generate a self-signed certificate
Execute the following command on the command line to generate a self-signed certificate and private key file:
$ openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout server-key.pem -out server-cert.pem
Fill in the certificate-related information as prompted. The generated server-cert.pem file is the server certificate, and the server-key.pem file is the server private key.
3.2 Edit the MySQL configuration file
Open the MySQL configuration file my.cnf or my.ini and add the following configuration items:
[mysqld] ssl-ca=/path/to/ca-cert.pem ssl-cert=/path/to/server-cert.pem ssl-key=/path/to/server-key.pem
Among them, /path/to / is the storage path of the certificate file. These configuration items specify the MySQL server's CA, server certificate, and server private key.
3.3 Restart the MySQL server
Restart the MySQL server to make the configuration items take effect.
Configure client connection
4.1 Generate client certificate and key pair
Execute the following commands in the command line to generate client certificate and private key files:
$ openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout client-key.pem -out client-cert.pem
Fill in the certificate-related information as prompted. The generated client-cert.pem file is the client certificate, and the client-key.pem file is the client private key.
4.2 Configure client connection parameters
In the application code that connects to the MySQL database, add the following connection parameters:
jdbc:mysql://hostname:port/database?ssl=true&verifyServerCertificate=true&clientCertificate=/path/to/client-cert.pem&clientKey=/path/to/client-key.pem
Among them, hostname and port are respectively The host name and port number of the MySQL server, database is the name of the database to be connected.
Summary:
Through the above steps, we successfully implemented two-way SSL authentication for the MySQL database. Two-way SSL authentication secures database connections, protecting sensitive data from unauthorized access. However, we need to pay attention to regularly updating the certificate and keeping the private key properly to ensure the security of the system.
The above is the detailed content of How to implement two-way SSL authentication for a MySQL database. For more information, please follow other related articles on the PHP Chinese website!