Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

mysql_replication: make MASTER_SSL_VERIFY_SERVER_CERT available #59

Open
securitym0nkey opened this issue Nov 6, 2020 · 3 comments · May be fixed by #63
Open

mysql_replication: make MASTER_SSL_VERIFY_SERVER_CERT available #59

securitym0nkey opened this issue Nov 6, 2020 · 3 comments · May be fixed by #63

Comments

@securitym0nkey
Copy link

SUMMARY

The mysql_replication module should support setting MASTER_SSL_VERIFY_SERVER_CERT.

ISSUE TYPE
  • Feature Idea
COMPONENT NAME

mysql_replication (changemaster)

ADDITIONAL INFORMATION

In an environment with a central CA as a trust anchor it certainly makes sense to verify the servers certificate. Otherwise a single compromised certificate+key would enable a MitM attack against the replication connection. Security minded people like to configure the replication connection in the most secure way possible.
@Jorge-Rodriguez
Copy link
Contributor

@securitym0nkey couldn't agree more.
Could you link the documentation for this feature?

@Andersson007 I can take this one

@securitym0nkey
Copy link
Author

@Jorge-Rodriguez

Sure, documentation is found here:

Is that what you need?

@Andersson007
Copy link
Collaborator

@Jorge-Rodriguez cool! Thank you folks

@Jorge-Rodriguez Jorge-Rodriguez linked a pull request Nov 21, 2020 that will close this issue
Draft
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Add missing options to CHANGE MASTER TO Jorge-Rodriguez/community.mysql
3 participants
@Jorge-Rodriguez @securitym0nkey @Andersson007