Note that there are some explanatory texts on larger screens.

plurals
  1. POMysql ssl remotely
    primarykey
    data
    text
    <p>If someone can tell me what I'm doing wrong it'd be great.</p> <p>If not, I'll settle for any other solution to goal.</p> <p>I need to remotely insert mysql rows. And I want it to be secure. I'm writing it all in jruby. Thanks, here's what I did so far,</p> <p>I get a:</p> <p>ERROR 2026 (HY000): SSL connection error</p> <p>When remotely try to access it with ssl:</p> <p>mysql -h host -u ssl_test -p --ssl-ca=ca-cert.pem</p> <p>I can connect remotely just fine to a user without require ssl. (mysql -h host -u user -p)</p> <p>I can also connect to this user locally with:</p> <p>mysql -h host -u ssl_test -p --ssl-ca=ca-cert.pem</p> <p>The ca-cert.pem are the same and the permissions for ssl_test is:</p> <pre><code>+--------------+----------------+----------+ | Host | User | ssl_type | +--------------+----------------+----------+ | % | ssl_test | ANY | </code></pre> <p>I generated the ca-cert and server-cert with:</p> <p>openssl genrsa 2048 > ca-key.pem</p> <p>openssl req -new -x509 -nodes -days 1000 -key ca-key.pem > ca-cert.pem</p> <p>openssl req -newkey rsa:2048 -days 1000 -nodes -keyout server-key.pem > server-req.pem</p> <p>openssl x509 -req -in server-req.pem -days 1000 -CA ca-cert.pem -CAkey ca-key.pem -set_serial 01 > server-cert.pem</p> <p>straight out of <a href="http://dev.mysql.com/doc/mysql-security-excerpt/5.0/en/secure-create-certs.html" rel="nofollow">http://dev.mysql.com/doc/mysql-security-excerpt/5.0/en/secure-create-certs.html</a></p> <p>I also tried creating the client stuff for x509 but it returns the same error.</p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload