MySQL Forums
Forum List  »  Security

Access denied using X509
Posted by: Ellinor
Date: March 27, 2006 08:37AM

Hi,

I've been trying to setup replication between two MySQL databases (version 5.0.19) using the following GRANT command:

GRANT replication slave on *.* to 'replication_user'@'%' identified by 'slavepwd' require X509;

The my.cnf file on the master side contains these parameters:
[mysqld]
..
ssl=1
ssl-capath=/opt/cert/
ssl-ca=/opt/cert/ca-cert.pem
ssl-key=/opt/cert/server-key.pem
ssl-cert=/opt/cert/server-cert.pem

The my.cnf file on the slave side contains these parameters:
[client]
#password = your_password
port = 3306
socket = /tmp/mysql.sock
ssl=1
ssl-ca=/opt/cert/ca-cert.pem
ssl-key=/opt/cert/client-key.pem
ssl-cert=/opt/cert/client-cert.pem


The certificates look ok, and if I setup the user with only 'require SSL' it all works fine.

I have looked at the traffic using Ethereal and both the server and client presents their certificates and accept them, but when the first 'Application Data' package has been sent the server disconnects.

The error message in the mysql-error file is 'Access denied...' errorcode 1045.

Any ideas?

Best regards,
Ellinor

Options: ReplyQuote


Subject
Views
Written By
Posted
Access denied using X509
4484
March 27, 2006 08:37AM
2351
March 30, 2006 05:37PM


Sorry, you can't reply to this topic. It has been closed.

Content reproduced on this site is the property of the respective copyright holders. It is not reviewed in advance by Oracle and does not necessarily represent the opinion of Oracle or any other party.