Shulou(Shulou.com)06/01 Report--

DbForge Studio for MySQL is a MySQL client that is widely used in Windows platform. It enables MySQL developers and managers to work with others to create and execute queries, develop and debug MySQL programs, and automate the management of MySQL database objects in a convenient environment. This article describes how to generate certificates for MySQL servers and SSL clients. Now follow the editor to take a look at the specific steps.

To create a SSL connection, you need the following three files:

Client key-used with client certificates to encrypt and decrypt data during connection

Client certificate

Authorization certificate-used to verify the identity of the client and server

You need to specify their location in the my.ini file of the MySQL server and on the Security tab of the Database connection Properties dialog box.

1. Download OpenSSL. This command line tool is used to create and manage private keys, public keys, and parameters.

2. Use start-> run-> cmd to open a command prompt and type the following to go to the OpenSSL installation directory (for example, it is D:\ OpenSSL):

D:

Cd\ openssl

3. Generate a key file for authorization certificate generation by typing:

Openssl genrsa 1024 > ca-key.pem

(this string will create a ca-key.pem file)

4. Generate an authorization certificate by typing:

Openssl req-new-x509-nodes-days 1000-key ca-key.pem-config myssl.cnf > ca-cert.pem

(this string creates a ca-cert.pem file. )

5. Generate a key file for server certificate generation by typing:

Openssl req-newkey rsa:1024-days 1000-nodes-keyout server-key.pem-config myssl.cnf > server-req.pem

(this string creates a server-key.pem file. )

6. Generate the server certificate file by typing:

Openssl x09-req-in server-req.pem-days 1000-CA ca-cert.pem-CAkey ca-key.pem-set_serial 01 > server-cert.pem

(this string creates a server-cert.pem file. )

7. Generate the key file for the client certificate by typing:

Openssl req-newkey rsa:1024-days 1000-nodes-keyout client-key.pem-config myssl.cnf > client-req.pem

(this string creates a client-key.pem file. )

8. Generate the client certificate file by typing:

Openssl x509-req-in client-req.pem-days 1000-CA ca-cert.pem-CAkey ca-key.pem-set_serial 01 client-cert.pem

(this string creates a client-cert.pem file. )

9. If necessary, relocate the generated files on your computer and change to the installation directory of the MySQL server. Open the my.ini file, and after the [mysqld] line, type the following to specify the location of the generated file-- ca-cert.pem,server-cert.pem and server-key.pem:

Ssl

Ssl-ca= "D:/SSL Certificates/ca-cert.pem"

Ssl-cert= "D:/SSL Certificates/Server/server-cert.pem"

Ssl-key= "D:/SSL Certificates/Server/server-key.pem"

Restart the MySQL server and check if it supports SSL- by opening a new SQL document in dbForge Studio for MySQL (in the top menu, select SQL, expand the New node of the File menu) and type:

Display variables, such as "have_openssl"

If the server returns Yes, you can set the SSL client. If the response is No or does not work in an existing configuration, visit http://dev.mysql.com/doc/refman/5.1/en/secure-connections.html to learn how to start the required server from scratch.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.