{"id":338,"date":"2021-07-23T12:28:03","date_gmt":"2021-07-23T12:28:03","guid":{"rendered":"https:\/\/ssdsunucum.com\/blog\/how-to-configure-mysql-ssl-connections\/"},"modified":"2021-07-23T12:28:03","modified_gmt":"2021-07-23T12:28:03","slug":"how-to-configure-mysql-ssl-connections","status":"publish","type":"post","link":"https:\/\/ssdsunucum.com\/blog\/how-to-configure-mysql-ssl-connections\/","title":{"rendered":"How to Configure MySQL SSL Connections"},"content":{"rendered":"<\/p>\n
\n
\n
\n

Valid for versions 88 through the latest version<\/em><\/p>\n<\/div>\n

\n

Version:<\/h4>\n

82<\/h4>\n

88<\/h4>\n<\/div><\/div>\n
\n

Overview<\/h2>\n

This document describes how to configure your server to use SSL for MySQL\u00ae database connections. After you secure your MySQL connections, malicious users cannot intercept your MySQL traffic.<\/p>\n

\n
Important:<\/div>\n
\n You must<\/strong> possess root<\/code> access to the client and host servers to complete this tutorial.\n <\/div>\n<\/div>\n

Configure MySQL SSL connections<\/h2>\n

Create the directory to store the SSL keys.<\/h3>\n

To create the directory that will contain the SSL keys, perform the following steps:<\/p>\n

    \n
  1. \n

    Log in to your server via SSH. For more information, read our SSH Access<\/em> documentation.<\/p>\n<\/li>\n

  2. \n

    Create an SSL key storage directory that MySQL can access. For example, run the mkdir \/mysql_keys<\/code> command to create a mysql_keys<\/code> directory.<\/p>\n<\/li>\n<\/ol>\n

    Create the SSL keys.<\/h3>\n
    \n
    Note:<\/div>\n
    \n In the following examples, \/mysql_keys<\/code> represents the key storage directory.\n <\/div>\n<\/div>\n

    To create the SSL keys, perform the following steps:<\/p>\n

      \n
    1. \n

      Run the following commands to create the Certificate Authority (CA) keys:\n<\/p>\n

      \n
      \n\n\n
      \n
      1\n<\/span>2\n<\/span><\/code><\/pre>\n<\/td>\n
      		\n
      openssl<\/span> genrsa<\/span> 2048<\/span> > \/<\/span>mysql_keys<\/span>\/<\/span>ca<\/span>-<\/span>key<\/span>.pem<\/span>\nopenssl<\/span> req<\/span> -<\/span>sha1<\/span> -<\/span>new<\/span> -<\/span>x509<\/span> -<\/span>nodes<\/span> -<\/span>days<\/span> 3650<\/span> -<\/span>key<\/span> \/<\/span>mysql_keys<\/span>\/<\/span>ca<\/span>-<\/span>key<\/span>.pem<\/span> > \/<\/span>mysql_keys<\/span>\/<\/span>ca<\/span>-<\/span>cert<\/span>.pem<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n<\/li>\n
    2. \n
      Run the following commands to create the server SSL key and certificate:\n<\/p>\n
      \n
      \n\n\n
      \n
      1\n<\/span>2\n<\/span>3\n<\/span><\/code><\/pre>\n<\/td>\n
      		\n
      openssl<\/span> req<\/span> -<\/span>sha1<\/span> -<\/span>newkey<\/span> rsa<\/span>:2048<\/span> -<\/span>days<\/span> 3650<\/span> -<\/span>nodes<\/span> -<\/span>keyout<\/span> \/<\/span>mysql_keys<\/span>\/<\/span>server<\/span>-<\/span>key<\/span>.pem<\/span> > \/<\/span>mysql_keys<\/span>\/<\/span>server<\/span>-<\/span>req<\/span>.pem<\/span>\nopenssl<\/span> x509<\/span> -<\/span>sha1<\/span> -<\/span>req<\/span> -<\/span>in<\/span> \/<\/span>mysql_keys<\/span>\/<\/span>server<\/span>-<\/span>req<\/span>.pem<\/span> -<\/span>days<\/span> 3650<\/span> -<\/span>CA<\/span> \/<\/span>mysql_keys<\/span>\/<\/span>ca<\/span>-<\/span>cert<\/span>.pem<\/span> -<\/span>CAkey<\/span> \/<\/span>mysql_keys<\/span>\/<\/span>ca<\/span>-<\/span>key<\/span>.pem<\/span> -<\/span>set_serial<\/span> 01<\/span> > \/<\/span>mysql_keys<\/span>\/<\/span>server<\/span>-<\/span>cert<\/span>.pem<\/span>\nopenssl<\/span> rsa<\/span> -<\/span>in<\/span> \/<\/span>mysql_keys<\/span>\/<\/span>server<\/span>-<\/span>key<\/span>.pem<\/span> -<\/span>out<\/span> \/<\/span>mysql_keys<\/span>\/<\/span>server<\/span>-<\/span>key<\/span>.pem<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n<\/li>\n
    3. \n
      Run the following commands to create the client SSL key and certificate:\n<\/p>\n
      \n
      \n\n\n
      \n
      1\n<\/span>2\n<\/span>3\n<\/span><\/code><\/pre>\n<\/td>\n
      		\n
      openssl<\/span> req<\/span> -<\/span>sha1<\/span> -<\/span>newkey<\/span> rsa<\/span>:2048<\/span> -<\/span>days<\/span> 3650<\/span> -<\/span>nodes<\/span> -<\/span>keyout<\/span> \/<\/span>mysql_keys<\/span>\/<\/span>client<\/span>-<\/span>key<\/span>.pem<\/span> > \/<\/span>mysql_keys<\/span>\/<\/span>client<\/span>-<\/span>req<\/span>.pem<\/span>\nopenssl<\/span> x509<\/span> -<\/span>sha1<\/span> -<\/span>req<\/span> -<\/span>in<\/span> \/<\/span>mysql_keys<\/span>\/<\/span>client<\/span>-<\/span>req<\/span>.pem<\/span> -<\/span>days<\/span> 3650<\/span> -<\/span>CA<\/span> \/<\/span>mysql_keys<\/span>\/<\/span>ca<\/span>-<\/span>cert<\/span>.pem<\/span> -<\/span>CAkey<\/span> \/<\/span>mysql_keys<\/span>\/<\/span>ca<\/span>-<\/span>key<\/span>.pem<\/span> -<\/span>set_serial<\/span> 01<\/span> > \/<\/span>mysql_keys<\/span>\/<\/span>client<\/span>-<\/span>cert<\/span>.pem<\/span>\nopenssl<\/span> rsa<\/span> -<\/span>in<\/span> \/<\/span>mysql_keys<\/span>\/<\/span>client<\/span>-<\/span>key<\/span>.pem<\/span> -<\/span>out<\/span> \/<\/span>mysql_keys<\/span>\/<\/span>client<\/span>-<\/span>key<\/span>.pem<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n<\/li>\n<\/ol>\n
      Edit the MySQL configuration.<\/h3>\n
      To edit the MySQL configuration, perform the following steps:<\/p>\n
        \n
      1. \n
        Open the \/etc\/my.cnf<\/code> file with your preferred text editor.<\/p>\n<\/li>\n
      2. \n
        Insert the following lines in the [mysqld]<\/code> section of the my.cnf<\/code> file:<\/p>\n
        \n
        \n\n\n
        \n
        1\n<\/span>2\n<\/span>3\n<\/span>4\n<\/span>5\n<\/span><\/code><\/pre>\n<\/td>\n
        		\n
        ssl<\/span>\nssl<\/span>-<\/span>cipher<\/span>=DHE<\/span>-<\/span>RSA<\/span>-<\/span>AES256<\/span>-<\/span>SHA<\/span>\nssl<\/span>-<\/span>ca<\/span>=\/<\/span>mysql_keys<\/span>\/<\/span>ca<\/span>-<\/span>cert<\/span>.pem<\/span>\nssl<\/span>-<\/span>cert<\/span>=\/<\/span>mysql_keys<\/span>\/<\/span>server<\/span>-<\/span>cert<\/span>.pem<\/span>\nssl<\/span>-<\/span>key<\/span>=\/<\/span>mysql_keys<\/span>\/<\/span>server<\/span>-<\/span>key<\/span>.pem<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n<\/li>\n
      3. \n
        Insert the following lines in the [client]<\/code> section of the my.cnf<\/code> file:<\/p>\n
        \n
        Note:<\/div>\n
        \n        If the [client]<\/code> section does not exist, you must<\/strong> add a [client]<\/code> section.\n    <\/div>\n<\/div>\n
        \n
        \n\n\n
        \n
        1\n<\/span>2\n<\/span>3\n<\/span>4\n<\/span><\/code><\/pre>\n<\/td>\n
        		\n
        [client<\/span>]\n    ssl<\/span>-<\/span>mode<\/span>=REQUIRED<\/span>\n    ssl<\/span>-<\/span>cert<\/span>=\/<\/span>mysql_keys<\/span>\/<\/span>client<\/span>-<\/span>cert<\/span>.pem<\/span>\n    ssl<\/span>-<\/span>key<\/span>=\/<\/span>mysql_keys<\/span>\/<\/span>client<\/span>-<\/span>key<\/span>.pem<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
        Your updated my.cnf<\/code> file should resemble the following example:<\/p>\n
        \n
        \n\n\n
        \n
         1\n<\/span> 2\n<\/span> 3\n<\/span> 4\n<\/span> 5\n<\/span> 6\n<\/span> 7\n<\/span> 8\n<\/span> 9\n<\/span>10\n<\/span>11\n<\/span>12\n<\/span>13\n<\/span>14\n<\/span>15\n<\/span>16\n<\/span>17\n<\/span>18\n<\/span>19\n<\/span>20\n<\/span>21\n<\/span><\/code><\/pre>\n<\/td>\n
        		\n
        [mysqld<\/span>]\n    max_connections<\/span>=500<\/span>\n    log<\/span>-<\/span>slow<\/span>-<\/span>queries<\/span>\n\n    max_allowed_packet<\/span>=268435456<\/span>\n    open_files_limit<\/span>=10000<\/span>\n    default<\/span>-<\/span>storage<\/span>-<\/span>engine<\/span>=MyISAM<\/span>\n    innodb_file_per_table<\/span>=1<\/span>\n    performance<\/span>-<\/span>schema<\/span>=0<\/span>\n\n    ssl<\/span>\n    ssl<\/span>-<\/span>cipher<\/span>=DHE<\/span>-<\/span>RSA<\/span>-<\/span>AES256<\/span>-<\/span>SHA<\/span>\n    ssl<\/span>-<\/span>ca<\/span>=\/<\/span>mysql_keys<\/span>\/<\/span>ca<\/span>-<\/span>cert<\/span>.pem<\/span>\n    ssl<\/span>-<\/span>cert<\/span>=\/<\/span>mysql_keys<\/span>\/<\/span>server<\/span>-<\/span>cert<\/span>.pem<\/span>\n    ssl<\/span>-<\/span>key<\/span>=\/<\/span>mysql_keys<\/span>\/<\/span>server<\/span>-<\/span>key<\/span>.pem<\/span>\n\n[client<\/span>]\n    ssl<\/span>-<\/span>mode<\/span>=REQUIRED<\/span>\n    ssl<\/span>-<\/span>cert<\/span>=\/<\/span>mysql_keys<\/span>\/<\/span>client<\/span>-<\/span>cert<\/span>.pem<\/span>\n    ssl<\/span>-<\/span>key<\/span>=\/<\/span>mysql_keys<\/span>\/<\/span>client<\/span>-<\/span>key<\/span>.pem<\/span>\n    <\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
        \n
        Note:<\/div>\n
        \n
          \n
        • \n
          The ssl-mode=REQUIRED<\/code> setting will create an encrypted connection if the server supports encrypted connections. If the server cannot create an encrypted connection, the connection will fail. For more information about additional options for the ssl-mode<\/code> setting, read MySQL\u2019s ssl-mode documentation.<\/p>\n<\/li>\n
        • \n
          MySQL introduced the ssl-mode<\/code> setting in MySQL 5.7. If you run MySQL 5.6 or older, replace  ssl-mode=REQUIRED<\/code> with ssl<\/code>.<\/p>\n<\/li>\n<\/ul><\/div>\n<\/div>\n<\/li>\n
        • \n
          Save your changes to the \/etc\/my.cnf<\/code> file and exit your text editor.<\/p>\n<\/li>\n
        • \n
          Run the following command to update the file permissions of the \/mysql_keys<\/code> directory and its files: <\/p>\n
          \n
          chown -<\/span>Rf mysql.<\/span> \/<\/span>mysql_keys<\/code><\/pre>\n<\/div>\n<\/li>\n
        • \n
          Run the \/scripts\/restartsrv_mysql<\/code> script to restart MySQL.<\/p>\n<\/li>\n<\/ol>\n
          Test the SSL configuration.<\/h3>\n
          To test the SSL configuration, perform the following steps:<\/p>\n
            \n
          1. \n
            To view MySQL\u2019s active SSL configuration, run the following command: <\/p>\n
            \n
            mysql -<\/span>e \"show variables like '%ssl%';\"<\/span><\/code><\/pre>\n<\/div>\n
            The output will resemble the following example:<\/p>\n
            \n
            \n\n\n
            \n
             1\n<\/span> 2\n<\/span> 3\n<\/span> 4\n<\/span> 5\n<\/span> 6\n<\/span> 7\n<\/span> 8\n<\/span> 9\n<\/span>10\n<\/span>11\n<\/span><\/code><\/pre>\n<\/td>\n
            		\n
            +---------------+------------------------+<\/span>\n    | Variable_name<\/span> | Value<\/span>                  |\n    +---------------+------------------------+<\/span>\n    | have_openssl<\/span>  | YES<\/span>                    |\n    | have_ssl<\/span>      | YES<\/span>                    |\n    | ssl_ca<\/span>        | \/<\/span>mysql_keys<\/span>\/<\/span>ca<\/span>-<\/span>cert<\/span>.pem<\/span> |\n    | ssl_capath<\/span>    |                        |\n    | ssl_cert<\/span>      | \/<\/span>mysql_keys<\/span>\/<\/span>server<\/span>-<\/span>cert<\/span>.pem<\/span> |\n    | ssl_cipher<\/span>    | DHE<\/span>-<\/span>RSA<\/span>-<\/span>AES256<\/span>-<\/span>SHA<\/span>     |\n    | ssl_key<\/span>       | \/<\/span>mysql_keys<\/span>\/<\/span>server<\/span>-<\/span>key<\/span>.pem<\/span>  |\n    +---------------+------------------------+<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n<\/li>\n
          2. \n
            To check a local connection to MySQL, run the following command, where example represents the cPanel account username: <\/p>\n
            \n
            mysql -<\/span>u example -<\/span>p<\/code><\/pre>\n<\/div>\n<\/li>\n
          3. \n
            When the system prompts you, enter the MySQL user account password.<\/p>\n<\/li>\n
          4. \n
            After you connect, run the status<\/code> command. The output will resemble the following example: <\/p>\n
            \n
            \n\n\n
            \n
             1\n<\/span> 2\n<\/span> 3\n<\/span> 4\n<\/span> 5\n<\/span> 6\n<\/span> 7\n<\/span> 8\n<\/span> 9\n<\/span>10\n<\/span>11\n<\/span>12\n<\/span>13\n<\/span>14\n<\/span>15\n<\/span>16\n<\/span>17\n<\/span>18\n<\/span>19\n<\/span>20\n<\/span>21\n<\/span>22\n<\/span><\/code><\/pre>\n<\/td>\n
            		\n
            mysql<\/span>> status<\/span>\n    --------------<\/span>\n    mysql<\/span>  Ver<\/span> 14.14<\/span> Distrib<\/span> 5.5.42<\/span>, for<\/span> Linux<\/span> (x86_64<\/span>) using<\/span> readline<\/span> 5.1<\/span>\n\n    Connection<\/span> id<\/span>:        19<\/span>\n    Current<\/span> database<\/span>:  \n    Current<\/span> user<\/span>:        example<\/span>@<\/span>localhost<\/span>\n    SSL<\/span>:            Cipher<\/span> in<\/span> use<\/span> is<\/span> DHE<\/span>-<\/span>RSA<\/span>-<\/span>AES256<\/span>-<\/span>SHA<\/span>\n    Current<\/span> pager<\/span>:        stdout<\/span>\n    Using<\/span> outfile<\/span>:        ''<\/span>\n    Using<\/span> delimiter<\/span>:    ;\n    Server<\/span> version<\/span>:        5.5.42<\/span>-<\/span>cll<\/span> MySQL<\/span> Community<\/span> Server<\/span> (GPL<\/span>)\n    Protocol<\/span> version<\/span>:    10<\/span>\n    Connection<\/span>:        Localhost<\/span> via<\/span> UNIX<\/span> socket<\/span>\n    Server<\/span> characterset<\/span>:    latin1<\/span>\n    Db<\/span>     characterset<\/span>:    latin1<\/span>\n    Client<\/span> characterset<\/span>:    utf8<\/span>\n    Conn<\/span>.  characterset<\/span>:    utf8<\/span>\n    UNIX<\/span> socket<\/span>:        \/<\/span>var<\/span>\/<\/span>lib<\/span>\/<\/span>mysql<\/span>\/<\/span>mysql<\/span>.sock<\/span>\n    Uptime<\/span>:            4<\/span> min<\/span> 36<\/span> sec<\/span>\n    Threads<\/span>: 1<\/span>  Questions<\/span>: 67<\/span>  Slow<\/span> queries<\/span>: 0<\/span>  Opens<\/span>: 34<\/span>  Flush<\/span> tables<\/span>: 1<\/span>  Open<\/span> tables<\/span>: 27<\/span>  Queries<\/span> per<\/span> second<\/span> avg<\/span>: 0.242<\/span>\n    --------------<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n<\/li>\n<\/ol>\n
            Create a user and allow remote access.<\/h3>\n
            \n
            Note:<\/div>\n
            \n        This step is optional<\/strong>.\n    <\/div>\n<\/div>\n
            To create a user and allow remote access, perform the following steps:<\/p>\n
              \n
            1. \n
              Navigate to cPanel\u2019s MySQL Databases<\/em> interface (cPanel >> Home >> Databases >> MySQL Databases<\/em>) and create your database user.<\/p>\n<\/li>\n
            2. \n
              Add the remote server\u2019s IP address to WHM\u2019s Remote MySQL<\/em> interface (cPanel >> Home >> Databases >> Remote MySQL<\/em>).<\/p>\n<\/li>\n
            3. \n
              On the remote MySQL server, create an SSL key storage directory that MySQL can access. For example, use the mkdir \/mysql_keys<\/code> command to create a mysql_keys<\/code> directory. <\/p>\n
              \n
              Note:<\/div>\n
              \n        You can skip this step if you have already created the \/mysql_keys<\/code> directory on the remote MySQL server.\n    <\/div>\n<\/div>\n<\/li>\n
            4. \n
              Copy the client SSL certificate to the remote MySQL server\u2019s \/mysql<\/code> directory.<\/p>\n<\/li>\n
            5. \n
              On the remote MySQL server, open the \/etc\/my.cnf<\/code> file with your preferred text editor.<\/p>\n<\/li>\n
            6. \n
              Insert the following lines in the [client]<\/code> section of the my.cnf<\/code> file:<\/p>\n
              \n
              \n\n\n
              \n
              1\n<\/span>2\n<\/span>3\n<\/span>4\n<\/span><\/code><\/pre>\n<\/td>\n
              		\n
              [client<\/span>]\n  ssl<\/span>-<\/span>mode<\/span>=REQUIRED<\/span>\n  ssl<\/span>-<\/span>cert<\/span>=\/<\/span>mysql_keys<\/span>\/<\/span>client<\/span>-<\/span>cert<\/span>.pem<\/span>\n  ssl<\/span>-<\/span>key<\/span>=\/<\/span>mysql_keys<\/span>\/<\/span>client<\/span>-<\/span>key<\/span>.pem<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
              \n
              Note:<\/div>\n
              \n        If the [client]<\/code> section does not exist, you must<\/strong> add the section.\n    <\/div>\n<\/div>\n
               Your updated \/etc\/my.cnf<\/code> file should resemble the following example: <\/p>\n
              \n
              \n\n\n
              \n
               1\n<\/span> 2\n<\/span> 3\n<\/span> 4\n<\/span> 5\n<\/span> 6\n<\/span> 7\n<\/span> 8\n<\/span> 9\n<\/span>10\n<\/span>11\n<\/span>12\n<\/span>13\n<\/span>14\n<\/span>15\n<\/span><\/code><\/pre>\n<\/td>\n
              		\n
              [mysqld<\/span>]\n    max_connections<\/span>=500<\/span>\n    log<\/span>-<\/span>slow<\/span>-<\/span>queries<\/span>\n\n    max_allowed_packet<\/span>=268435456<\/span>\n    open_files_limit<\/span>=10000<\/span>\n    default<\/span>-<\/span>storage<\/span>-<\/span>engine<\/span>=MyISAM<\/span>\n    innodb_file_per_table<\/span>=1<\/span>\n    performance<\/span>-<\/span>schema<\/span>=0<\/span>\n\n\n[client<\/span>]\n    ssl<\/span>-<\/span>mode<\/span>=REQUIRED<\/span>\n    ssl<\/span>-<\/span>cert<\/span>=\/<\/span>mysql_keys<\/span>\/<\/span>client<\/span>-<\/span>cert<\/span>.pem<\/span>\n    ssl<\/span>-<\/span>key<\/span>=\/<\/span>mysql_keys<\/span>\/<\/span>client<\/span>-<\/span>key<\/span>.pem<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
              \n
              Note:<\/div>\n
              \n
                \n
              • \n
                The ssl-mode=REQUIRED<\/code> setting will create an encrypted connection if the server supports encrypted connections. If the server cannot create an encrypted connection, the connection will fail. For more information about additional options for the ssl-mode<\/code> setting, read MySQL\u2019s ssl-mode documentation.<\/p>\n<\/li>\n
              • \n
                MySQL introduced the ssl-mode<\/code> setting in MySQL 5.7. If you run MySQL 5.6 or older, replace  ssl-mode=REQUIRED<\/code> with ssl<\/code>.<\/p>\n<\/li>\n<\/ul><\/div>\n<\/div>\n<\/li>\n
              • \n
                Save your changes to the \/etc\/my.cnf<\/code> file and exit your text editor.<\/p>\n<\/li>\n
              • \n
                Run the following command to update the permissions for the \/mysql_keys<\/code> directory and its files: <\/p>\n
                \n
                chown -<\/span>Rf mysql.<\/span> \/<\/span>mysql_keys<\/code><\/pre>\n<\/div>\n<\/li>\n
              • \n
                Restart the MySQL server.<\/p>\n<\/li>\n<\/ol>\n
                \n
                Note:<\/div>\n
                \n        If the remote MySQL server runs cPanel & WHM, use the \/scripts\/restartsrv_mysql<\/code> script to restart MySQL.\n    <\/div>\n<\/div>\n
                Test the remote MySQL connection.<\/h3>\n
                To test the remote MySQL connection, perform the following steps:<\/p>\n
                  \n
                1. \n
                  Log in to the remote MySQL server via SSH. For more information, read our SSH Access<\/em> documentation.<\/p>\n<\/li>\n
                2. \n
                  Use the mysql<\/code> command to remotely connect to the MySQL server. The following example uses the IP address 192.168.0.1<\/code> for the destination MySQL server and example<\/code> for the MySQL user:<\/p>\n
                  \n
                  mysql -<\/span>u example -<\/span>h 192.168.0.1<\/span> -<\/span>p<\/code><\/pre>\n<\/div>\n
                  The mysql<\/code> command will connect you to the remote MySQL server and request the MySQL user password.<\/li>\n
                3. \n
                  After you connect to the remote MySQL server, enter the status<\/code> command. The output will resemble the following example: <\/p>\n
                  \n
                  \n\n\n
                  \n
                   1\n<\/span> 2\n<\/span> 3\n<\/span> 4\n<\/span> 5\n<\/span> 6\n<\/span> 7\n<\/span> 8\n<\/span> 9\n<\/span>10\n<\/span>11\n<\/span>12\n<\/span>13\n<\/span>14\n<\/span>15\n<\/span>16\n<\/span>17\n<\/span>18\n<\/span>19\n<\/span>20\n<\/span>21\n<\/span>22\n<\/span><\/code><\/pre>\n<\/td>\n
                  		\n
                  mysql<\/span>> status<\/span>\n--------------<\/span>\nmysql<\/span>  Ver<\/span> 14.14<\/span> Distrib<\/span> 5.5.42<\/span>, for<\/span> Linux<\/span> (x86_64<\/span>) using<\/span> readline<\/span> 5.1<\/span>\n\nConnection<\/span> id<\/span>:        19<\/span>\nCurrent<\/span> database<\/span>:  \nCurrent<\/span> user<\/span>:        example<\/span>@<\/span>localhost<\/span>\nSSL<\/span>:            Cipher<\/span> in<\/span> use<\/span> is<\/span> DHE<\/span>-<\/span>RSA<\/span>-<\/span>AES256<\/span>-<\/span>SHA<\/span>\nCurrent<\/span> pager<\/span>:        stdout<\/span>\nUsing<\/span> outfile<\/span>:        ''<\/span>\nUsing<\/span> delimiter<\/span>:    ;\nServer<\/span> version<\/span>:        5.5.42<\/span>-<\/span>cll<\/span> MySQL<\/span> Community<\/span> Server<\/span> (GPL<\/span>)\nProtocol<\/span> version<\/span>:    10<\/span>\nConnection<\/span>:        Localhost<\/span> via<\/span> UNIX<\/span> socket<\/span>\nServer<\/span> characterset<\/span>:    latin1<\/span>\nDb<\/span>     characterset<\/span>:    latin1<\/span>\nClient<\/span> characterset<\/span>:    utf8<\/span>\nConn<\/span>.  characterset<\/span>:    utf8<\/span>\nUNIX<\/span> socket<\/span>:        \/<\/span>var<\/span>\/<\/span>lib<\/span>\/<\/span>mysql<\/span>\/<\/span>mysql<\/span>.sock<\/span>\nUptime<\/span>:            4<\/span> min<\/span> 36<\/span> sec<\/span>\nThreads<\/span>: 1<\/span>  Questions<\/span>: 67<\/span>  Slow<\/span> queries<\/span>: 0<\/span>  Opens<\/span>: 34<\/span>  Flush<\/span> tables<\/span>: 1<\/span>  Open<\/span> tables<\/span>: 27<\/span>  Queries<\/span> per<\/span> second<\/span> avg<\/span>: 0.242<\/span>\n--------------<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n<\/li>\n<\/ol><\/div>\n","protected":false},"excerpt":{"rendered":"
                  Valid for versions 88 through the latest version Version: 82 88 Overview This document describes how to configure your server to use SSL for MySQL\u00ae database connections. After you secure your MySQL connections, malicious users cannot intercept your MySQL traffic. Important: You must possess root access to the client and host servers to complete this …<\/p>\n","protected":false},"author":1,"featured_media":339,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts\/338"}],"collection":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/comments?post=338"}],"version-history":[{"count":0,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts\/338\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/media\/339"}],"wp:attachment":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/media?parent=338"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/categories?post=338"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/tags?post=338"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}