Difference between revisions of "MySQL 8.0.16 - OpenSSL 1.1.1"
Jump to navigation
Jump to search
(Created page with "Below is an SSL Configuration for a MySQL web server (version 8.0.16) and OpenSSL (version 1.1.1). This configuration was made with the [https://ssl-config.mozilla.org/ Mozill...") |
|||
Line 1: | Line 1: | ||
Below is an SSL Configuration for a MySQL web server (version 8.0.16) and OpenSSL (version 1.1.1). This configuration was made with the [https://ssl-config.mozilla.org/ Mozilla SSL Configuration Generator.] | Below is an SSL Configuration for a MySQL web server (version 8.0.16) and OpenSSL (version 1.1.1). This configuration was made with the [https://ssl-config.mozilla.org/ Mozilla SSL Configuration Generator.] | ||
+ | <pre> | ||
+ | # 2019-09-12, https://ssl-config.mozilla.org/#server=mysql&server-version=8.0.16&config=intermediate&openssl-version=1.1.1 | ||
+ | [mysqld] | ||
+ | require_secure_transport = on | ||
+ | ssl-cert = /path/to/signed_cert_plus_intermediates.pem | ||
+ | ssl-key = /path/to/private_key | ||
+ | ssl-cipher = ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 | ||
+ | tls_version = TLSv1.2,TLSv1.3 | ||
+ | </pre> |
Latest revision as of 10:10, 24 September 2019
Below is an SSL Configuration for a MySQL web server (version 8.0.16) and OpenSSL (version 1.1.1). This configuration was made with the Mozilla SSL Configuration Generator.
# 2019-09-12, https://ssl-config.mozilla.org/#server=mysql&server-version=8.0.16&config=intermediate&openssl-version=1.1.1 [mysqld] require_secure_transport = on ssl-cert = /path/to/signed_cert_plus_intermediates.pem ssl-key = /path/to/private_key ssl-cipher = ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 tls_version = TLSv1.2,TLSv1.3