|
⇤ ← Revision 1 as of 2020-02-03 17:12:43
Size: 1643
Comment:
|
Size: 1450
Comment:
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 1: | Line 1: |
| Describe Mariadb Replication Encryption here. | INCOMPLETE and untested, do not use! |
| Line 3: | Line 3: |
| incomplete, do not use! This should really be split into two parts * encrypting traffic from clients to the sql server * encrypting traffic between sql servers in the galera cluster = Mariadb Encryption = |
= Mariadb Replication Encryption = |
INCOMPLETE and untested, do not use!
Mariadb Replication Encryption
Certificates
Certificate Authority
Create the certificate authority key.
openssl genrsa -out ca-key.pem 2048
Create the certificate authority certificate.
openssl req -new -x509 -nodes -days 365000 -key ca-key.pem -out ca-cert.pem
Server
Create the server key.
openssl req -newkey rsa:2048 -days 365000 -nodes -keyout server-key.pem -out server-req.pem openssl rsa -in server-key.pem -out server-key.pem
Sign the server certificate.
openssl x509 -req -in server-req.pem -days 365000 -CA ca-cert.pem -CAkey ca-key.pem -set_serial 01 -out server-cert.pem
Client
Create the client key.
openssl req -newkey rsa:2048 -days 365000 -nodes -keyout client-key.pem -out client-req.pem openssl rsa -in client-key.pem -out client-key.pem
Sign the client certificate
openssl x509 -req -in client-req.pem -days 365000 -CA ca-cert.pem -CAkey ca-key.pem -set_serial 01 -out client-cert.pem