Ich habe eine Debian 9.4.0 Installation mit einem mariadb Server.
Code: Alles auswählen
sudo apt install software-properties-common dirmngr
sudo apt-key adv --recv-keys --keyserver keyserver.ubuntu.com 0xF1656F24C74CD1D8
sudo add-apt-repository 'deb [arch=amd64] http://ftp.hosteurope.de/mirror/mariadb.org/repo/10.3/debian stretch main'
sudo apt update
sudo apt install mariadb-server-10.3 libmariadbclient18nano /etc/mysql/my.cnf
Code: Alles auswählen
bind-address = SERVER-IPCode: Alles auswählen
[mysqld]
### MySQL Server ###
## Securing the Database with ssl option and certificates ##
## There is no control over the protocol level used. ##
## mariadb will use TLSv1.0 or better. ##
ssl
ssl-ca=/etc/mysql/ca_ecdsa.crt.pem
ssl-cert=/etc/mysql/server_ecdsa.crt.pem
ssl-key=/etc/mysql/server_ecdsa.key.pem
ssl=on
ssl-cipher=TLSv1.2Code: Alles auswählen
[mysql]
## MySQL Client Configuration ##
ssl-ca=/etc/mysql/ca_ecdsa.crt.pem
ssl-cert=/etc/mysql/client_ecdsa.crt.pem
ssl-key=/etc/mysql/client_ecdsa.key.pem
### This option is disabled by default ###
### ssl-verify-server-cert ##
#ssl-verify-server-cert=onCode: Alles auswählen
SHOW VARIABLES LIKE '%ssl%';
+---------------------+------------------------------------------+
| Variable_name | Value |
+---------------------+------------------------------------------+
| have_openssl | YES |
| have_ssl | DISABLED |
| ssl_ca | /etc/mysql/ca_ecdsa.crt.pem |
| ssl_capath | |
| ssl_cert | /etc/mysql/server_ecdsa.crt.pem |
| ssl_cipher | |
| ssl_crl | |
| ssl_crlpath | |
| ssl_key | /etc/mysql/server_ecdsa.key.pem |
| version_ssl_library | OpenSSL 1.1.0f 25 May 2017 |
+---------------------+------------------------------------------+
status;
--------------
mysql Ver 15.1 Distrib 10.3.8-MariaDB, for debian-linux-gnu (x86_64) using readline 5.2
Connection id: 11
Current database:
Current user: root@localhost
SSL: Not in use
Current pager: stdout
Using outfile: ''
Using delimiter: ;
Server: MariaDB
Server version: 10.3.8-MariaDB-1:10.3.8+maria~stretch-log mariadb.org binary distribution
Protocol version: 10
Connection: Localhost via UNIX socket
Server characterset: latin1
Db characterset: latin1
Client characterset: utf8
Conn. characterset: utf8
UNIX socket: /var/run/mysqld/mysqld.sock
Uptime: 1 min 15 sec
Threads: 8 Questions: 7 Slow queries: 0 Opens: 17 Flush tables: 1 Open tables: 11 Queries per second avg: 0.093
--------------
Code: Alles auswählen
SHOW VARIABLES LIKE '%ssl%';
+---------------------+-----------------------------+
| Variable_name | Value |
+---------------------+-----------------------------+
| have_openssl | YES |
| have_ssl | YES |
| ssl_ca | |
| ssl_capath | |
| ssl_cert | |
| ssl_cipher | |
| ssl_crl | |
| ssl_crlpath | |
| ssl_key | |
| version_ssl_library | OpenSSL 1.1.0f 25 May 2017 |
+---------------------+-----------------------------+
10 rows in set (0.003 sec)
status;
--------------
mysql Ver 15.1 Distrib 10.3.8-MariaDB, for debian-linux-gnu (x86_64) using readline 5.2
Connection id: 9
Current database:
Current user: root@localhost
SSL: Not in use
Current pager: stdout
Using outfile: ''
Using delimiter: ;
Server: MariaDB
Server version: 10.3.8-MariaDB-1:10.3.8+maria~stretch-log mariadb.org binary distribution
Protocol version: 10
Connection: Localhost via UNIX socket
Server characterset: latin1
Db characterset: latin1
Client characterset: utf8
Conn. characterset: utf8
UNIX socket: /var/run/mysqld/mysqld.sock
Uptime: 10 sec
Threads: 8 Questions: 5 Slow queries: 0 Opens: 17 Flush tables: 1 Open tables: 11 Queries per second avg: 0.500
--------------
Hierbei handelt es sich um ECC 384 Zertifikate (TLSv1.2, Cipher is ECDHE-ECDSA-AES256-GCM-SHA384).
