Mention how to setup SSL cert in MySQL config file.
This commit is contained in:
parent
42632667f5
commit
3eb2bf4693
|
@ -163,6 +163,9 @@ Restarting Nginx service is required.
|
|||
|
||||
### OpenLDAP
|
||||
|
||||
> If OpenLDAP is listening on localhost and not accessible from external
|
||||
> network, this could be optional setup.
|
||||
|
||||
* On Red Hat and CentOS, it's defined in `/etc/openldap/slapd.conf`.
|
||||
* On Debian and Ubuntu, it's defined in `/etc/ldap/slapd.conf`.
|
||||
* On FreeBSD, it's defined in `/usr/local/etc/openldap/slapd.conf`.
|
||||
|
@ -176,6 +179,25 @@ TLSCertificateKeyFile /etc/pki/tls/private/server.key
|
|||
|
||||
Restarting OpenLDAP service is required.
|
||||
|
||||
### MySQL, MariaDB
|
||||
|
||||
> If MySQL/MariaDB is listening on localhost and not accessible from external
|
||||
> network, this could be optional setup.
|
||||
|
||||
* On Red Hat and CentOS, it's defined in `/etc/my.cnf`
|
||||
* On Debian and Ubuntu, it's defined in `/etc/mysql/my.cnf`.
|
||||
* Since Ubuntu 15.04, it's defined in `/etc/mysql/mariadb.conf.d/mysqld.cnf`.
|
||||
* On FreeBSD, it's defined in `/usr/local/etc/my.cnf`.
|
||||
* On OpenBSD, it's defined in `/etc/my.cnf`.
|
||||
|
||||
```
|
||||
[mysqld]
|
||||
|
||||
ssl-ca = /etc/pki/tls/certs/server.ca-bundle
|
||||
ssl-cert = /etc/pki/tls/certs/server.crt
|
||||
ssl-key = /etc/pki/tls/private/server.key
|
||||
```
|
||||
|
||||
## Reference
|
||||
|
||||
* [Configuring HTTPS servers](http://nginx.org/en/docs/http/configuring_https_servers.html)
|
||||
|
|
|
@ -21,6 +21,7 @@
|
|||
<li><a href="#apache-web-server">Apache (web server)</a></li>
|
||||
<li><a href="#nginx-web-server">Nginx (web server)</a></li>
|
||||
<li><a href="#openldap">OpenLDAP</a></li>
|
||||
<li><a href="#mysql-mariadb">MySQL, MariaDB</a></li>
|
||||
</ul>
|
||||
</li>
|
||||
<li><a href="#reference">Reference</a></li>
|
||||
|
@ -166,6 +167,10 @@ certificates in the combined file:</p>
|
|||
|
||||
<p>Restarting Nginx service is required.</p>
|
||||
<h3 id="openldap">OpenLDAP</h3>
|
||||
<blockquote>
|
||||
<p>If OpenLDAP is listening on localhost and not accessible from external
|
||||
network, this could be optional setup.</p>
|
||||
</blockquote>
|
||||
<ul>
|
||||
<li>On Red Hat and CentOS, it's defined in <code>/etc/openldap/slapd.conf</code>.</li>
|
||||
<li>On Debian and Ubuntu, it's defined in <code>/etc/ldap/slapd.conf</code>.</li>
|
||||
|
@ -178,6 +183,27 @@ TLSCertificateKeyFile /etc/pki/tls/private/server.key
|
|||
</code></pre>
|
||||
|
||||
<p>Restarting OpenLDAP service is required.</p>
|
||||
<h3 id="mysql-mariadb">MySQL, MariaDB</h3>
|
||||
<blockquote>
|
||||
<p>If MySQL/MariaDB is listening on localhost and not accessible from external
|
||||
network, this could be optional setup.</p>
|
||||
</blockquote>
|
||||
<ul>
|
||||
<li>On Red Hat and CentOS, it's defined in <code>/etc/my.cnf</code></li>
|
||||
<li>On Debian and Ubuntu, it's defined in <code>/etc/mysql/my.cnf</code>.<ul>
|
||||
<li>Since Ubuntu 15.04, it's defined in <code>/etc/mysql/mariadb.conf.d/mysqld.cnf</code>.</li>
|
||||
</ul>
|
||||
</li>
|
||||
<li>On FreeBSD, it's defined in <code>/usr/local/etc/my.cnf</code>.</li>
|
||||
<li>On OpenBSD, it's defined in <code>/etc/my.cnf</code>.</li>
|
||||
</ul>
|
||||
<pre><code>[mysqld]
|
||||
|
||||
ssl-ca = /etc/pki/tls/certs/server.ca-bundle
|
||||
ssl-cert = /etc/pki/tls/certs/server.crt
|
||||
ssl-key = /etc/pki/tls/private/server.key
|
||||
</code></pre>
|
||||
|
||||
<h2 id="reference">Reference</h2>
|
||||
<ul>
|
||||
<li><a href="http://nginx.org/en/docs/http/configuring_https_servers.html">Configuring HTTPS servers</a></li>
|
||||
|
|
Loading…
Reference in New Issue