Having trouble implementing SSL In replication.

[J M]

Hi,

I am currently in the process of setting up a replication with ssl and need help to see if i have everything set up correctly, as i assume when i run the following queries from the workbench i should get a value for the ssl_cipher but i don't instead i get a null value.

show variables like 'ssl_cipher';
show status where variable_name like 'ssl_cipher';

Below are my current settings on the my.ini files of the slave and master.

On the slave
ssl-ca=ca-cert.pem
ssl-cert=client-cert.pem
ssl-key=client-key.pem

On the master
ssl-ca=ca-cert.pem
ssl-cert=server-cert.pem
ssl-key=server-key.pem

I run this on the slave before i start the slave.
CHANGE MASTER TO
MASTER_HOST='host',
MASTER_USER='user',
MASTER_PASSWORD='password',
MASTER_SSL=1,
MASTER_SSL_CA = 'ca-cert.pem',
MASTER_SSL_CERT = 'server-cert.pem',
MASTER_SSL_KEY = 'server-key.pem';

I get a connection between the master and slave but no value for the ssl_cipher, which i assume means the information being passed across the network is not encrypted. Please can someone advise what i am doing wrong. Also one last thing i can get a login with ssl encryption(ssl_cipher has a value) to my master machine from the command line using the following.

mysql --ssl-ca=ca-cert.pem
--ssl-cert=client-cert.pem
--ssl-key=client-key.pem
-h host
-u user
-ppassword;


Thanks.



Edited 1 time(s). Last edit at 03/01/2013 12:06PM by J M.