Bhushan Rane MySQL - SSL - with TLS1.2 cipher AES256-SHA256 / DHE-RSA-AES256-SHA256
Mar 17, 2015; 17:51
Bhushan Rane
MySQL - SSL - with TLS1.2 cipher AES256-SHA256 / DHE-RSA-AES256-SHA256
I have compiled MySQL with openssl, I am able to connect to MySQL over SSL with TLS1.0 ciphers. But when I tried to connect with TLS1.2 ciphers connection fails with error. ==============MySQL server version :- 5.6.23-log Source distribution Custom OpenSSL version :- OpenSSL 1.0.1j 15 Oct 2014 Java version :- 1.8.0_40 ==============Error thrown with TLS1.2 cipher connect :- > mysql -umysql --ssl-cipher=DHE-RSA-AES256-SHA256 -T -v ERROR 2026 (HY000): SSL connection error: error:00000001:lib(0):func(0):reason(1)
User time 0.00, System time 0.00 Maximum resident set size 2664, Integral resident set size 0 Non-physical pagefaults 777, Physical pagefaults 0, Swaps 0 Blocks in 0 out 0, Messages in 0 out 0, Signals 0 Voluntary context switches 2, Involuntary context switches 5 ==============Snippet of my.cnf :- [client] default-character-set=utf8 ssl=ON ssl-ca=/home/mysql-cert/ca.pem ssl-cert=/home/mysql-cert/client-cert.pem ssl-key=/home/mysql-cert/client-key.pem
mysql> \s -------------- mysql Ver 14.14 Distrib 5.6.23, for Linux (x86_64) using EditLine wrapper
Connection id: 6 Current database: Current user: root@localhost SSL: Cipher in use is AES256-SHA Current pager: stdout Using outfile: '' Using delimiter: ; Server version: 5.6.23-log Source distribution Protocol version: 10 Connection: Localhost via UNIX socket Server characterset: latin1 Db characterset: latin1 Client characterset: utf8 Conn. characterset: utf8 UNIX socket: /tmp/mysql.sock Uptime: 1 hour 32 min 40 sec
Threads: 1 Questions: 11 Slow queries: 0 Opens: 67 Flush tables: 1 Open tables: 60 Queries per second avg: 0.001 --------------
mysql> ==============MySQL compiled as :- > cmake . -DCMAKE_PREFIX_PATH=/opt/scr-openssl/ssl/ -DWITH_SSL=/opt/scr-openssl/ssl/ -DWITH_OPENSSL=/opt/scr-openssl/ssl/bin/ -DWITH_OPENSSL_INCLUDES=/opt/scr-openssl/ssl/include/ -DWITH_OPENSSL_LIBS=/opt/scr-openssl/ssl/lib/ -DENABLE_DOWNLOADS=1 >make >make install ============ Please help me out to configure MySQL to work with TLS1.2 cipher.
Mar 17
Reindl Harald Re: MySQL - SSL - with TLS1.2 cipher AES256-SHA256 / DHE-RSA-AES256-SHA256
Mar 17, 2015; 13:51
Reindl Harald
Re: MySQL - SSL - with TLS1.2 cipher AES256-SHA256 / DHE-RSA-AES256-SHA256
Mar 17
Bhushan Rane Re: Re: MySQL - SSL - with TLS1.2 cipher AES256-SHA256 / DHE-RSA-AES256-SHA256
Mar 17, 2015; 18:55
Bhushan Rane
Re: Re: MySQL - SSL - with TLS1.2 cipher AES256-SHA256 / DHE-RSA-AES256-SHA256
Mar 17
Reindl Harald Re: MySQL - SSL - with TLS1.2 cipher AES256-SHA256 / DHE-RSA-AES256-SHA256
Mar 17, 2015; 14:43
Reindl Harald
Re: MySQL - SSL - with TLS1.2 cipher AES256-SHA256 / DHE-RSA-AES256-SHA256
Search
Lasso Programming
This site manages and broadcasts several email lists pertaining to Lasso Programming and technologies related and used by Lasso developers. Sign up today!