Connect to MySQL with custom SSL certs

SSL in MySQL is different than HTTP SSL, both the server and client(s) have their own pair of key/cert.

When SSL is “REQUIRED” for incoming connections (which is my case), the client needs to provide it’s own cert.

What Google Cloud SQL says in the config:
Capture d’écran 2020-12-01 à 12.15.02

What MySQL documentation says:

For accounts created with a REQUIRE X509 clause, clients must specify at least --ssl-cert and --ssl-key.

or accounts created with a REQUIRE ISSUER or REQUIRE SUBJECT clause, the encryption requirements are the same as for REQUIRE X509

PS: 6.3.1 Configuring MySQL to Use Encrypted Connections

How can we move forward, a feature request?

1 Like