Re: SSL don't work

[Georgi Kodinov]

The way you're calling s_server and s_client is a bit different from how you're using the certs/keys with mysql.

With the mysql server you have both a key (C:\Program Files\MySQL\MySQL Server 5.6\certs\server-key.pem ), a CA (C:\Program Files\MySQL\MySQL Server 5.6\certs\ca-cert.pem ) and a certificate file (C:\Program Files\MySQL\MySQL Server 5.6\certs\server-cert.pem)

With the mysql client/heidiSQL you have SSL private key (client-key.pem), a CA (ca-cert.pem) and a client certificate (client-cert.pem).

And in your invocation of s_server you only have a cert and a key (and a CA dependent on your machine-wide ssl config).
And in s_client you have no key material.

You need to test with exactly the same key files to see the error :

s_client -cert client-cert.pem -key client-key.pem -CAfile ca-cert.pem ...

s_server -cert C:\Program Files\MySQL\MySQL Server 5.6\certs\server-cert.pem -key C:\Program Files\MySQL\MySQL Server 5.6\certs\server-key.pem and -CAcert C:\Program Files\MySQL\MySQL Server 5.6\certs\ca-cert.pem ...