#author("2023-07-08T09:24:24+09:00","default:kuji","kuji") #author("2023-07-08T09:29:09+09:00","default:kuji","kuji") CONTENTS #contents ---- Lastmodified &lastmod; ---- *MySQL SSL [#dfb97793] https://dev.mysql.com/doc/refman/8.0/ja/mysql-ssl-rsa-setup.html https://dev.mysql.com/doc/refman/8.0/ja/using-encrypted-connections.html https://techdocs.broadcom.com/jp/ja/ca-enterprise-software/layer7-api-management/api-gateway/10-0/install-configure-upgrade/enable-ssl-connections-for-mysql.html #mkdir /var/db/mysql_ssl_pems # /usr/local/bin/mysql_ssl_rsa_setup --datadir /var/db/mysql_ssl_pems/ Ignoring -days; not generating a certificate Generating a RSA private key ..............................................+++++ ................+++++ writing new private key to 'ca-key.pem' ----- Ignoring -days; not generating a certificate Generating a RSA private key .........................................+++++ ...............................................................................+++++ writing new private key to 'server-key.pem' ----- Ignoring -days; not generating a certificate Generating a RSA private key ...................+++++ ........................................................+++++ writing new private key to 'client-key.pem' ----- 1026 8:30 chown -R mysql:mysql mysql_ssl_pems/ 1027 8:45 cd mysql_ssl_pems 1028 8:45 ll 1029 8:48 cp *.* /var/db/mysql/ 2023-07-07T23:55:06.606037Z 0 [System] [MY-010910] [Server] /usr/local/libexec/mysqld: Shutdown complete (mysqld 8.0.32) Source distribution. 2023-07-07T23:55:07.985575Z 0 [System] [MY-010116] [Server] /usr/local/libexec/mysqld (mysqld 8.0.32) starting as process 32209 2023-07-07T23:55:08.058421Z 1 [System] [MY-013576] [InnoDB] InnoDB initialization has started. 2023-07-07T23:55:22.688154Z 1 [System] [MY-013577] [InnoDB] InnoDB initialization has ended. 2023-07-07T23:55:25.263365Z 0 [Warning] [MY-010068] [Server] CA certificate /var/db/mysql/ca.pem is self signed. 2023-07-07T23:55:25.263419Z 0 [System] [MY-013602] [Server] Channel mysql_main configured to support TLS. Encrypted connections are now supported for this channel. show variables like '%ssl'; | Variable_name | Value |h | have_openssl | YES | | have_ssl | YES | ---- Total access &counter(total);:本日 &counter(today);:昨日 &counter(yesterday); #counter([total|today|yesterday]);