Mysql配置SSL

[client]
ssl-ca=$DIR/cacert.pem
ssl-cert=$DIR/client-cert.pem
ssl-key=$DIR/client-key.pem
[mysqld]
ssl-ca=$DIR/cacert.pem
ssl-cert=$DIR/server-cert.pem
ssl-key=$DIR/server-key.pem

6. 测试启动mysql
$DIR 是选项文件my.cnf 的路径
shell> mysqld --defaults-file=$DIR/my.cnf &
Then invoke a client program using the same option file:
shell> mysql --defaults-file=$DIR/my.cnf

[root@localhost mysql-5.0.20a]# chown -R root  /usr/local/mysql
[root@localhost mysql-5.0.20a]# chown -R mysql /usr/local/mysql/var
[root@localhost mysql-5.0.20a]# chgrp -R mysql /usr/local/mysql
[root@localhost mysql-5.0.20a]# /usr/local/mysql/bin/mysqld_safe --user=mysql &
[root@localhost mysql]# ./bin/mysql -u root --socket=/tmp/mysql.sock
对于设置为服务只要把mysql/share/mysql/mysql.server放到/etc/init.d/下改名为mysql
[root@localhost mysql]# chmod 775 /etc/init.d/mysql
[root@localhost mysql]# chkconfig --add mysql

mysql> grant all privileges on mydb.* to 'admin'@'%' Identified by '123456';

grant all privileges on mydb2.* to 'd_admin'@'%' Identified by '123456';

GRANT ALL PRIVILEGES ON  mydb2.* TO 'bodd'@'192.168.18.14'  IDENTIFIED BY 'domainssl'  REQUIRE SSL;
flush PRIVILEGES;