MySQL master-slave SSL encryption transmission error resolution

Case: Today's implementation of MySQL master-slave +ssl encryption transfer, Master signed a certificate for slave has a small problem:

failedto Update Database txt_dberror number 2

650) this.width=650; "Src=" Http://s5.51cto.com/wyfs02/M00/8B/ED/wKioL1hc1cuyWMfNAADw-HyLV08597.png-wh_500x0-wm_3 -wmp_4-s_1553221654.png "title=" 1.png "alt=" Wkiol1hc1cuywmfnaadw-hylv08597.png-wh_50 "/>

Did not notice at the beginning, resulting in the slave through the Certificate Connection Master error certificate errors. Careful examination only to see the error.

1, the cause of the error:

This thing Hap pens when certificates share common data. You cannot has a

Certificates that look otherwise the same.

This means that when a certificate shares data, it cannot be two identical.

2, the solution method:

2.1) Modify index.txt.attr to No (use)

[email protected] ca]# Cat Index.txt.attrunique_subject = no[[email protected] ca]#

2.2) Set the Comonname to a different

In master and slave, the problem was caused by the fact that I used the name Renzhiyuan.

3, slave re-login: (Solve)

mysql-urepuser-pxxx-h192.168.1.220--SSL-CA=/ETC/MYSQL/SSL/CACERT.PEM--SSL-CERT=/ETC/MYSQL/SSL/SLAVE.CRT-- Ssl-key=/etc/mysql/ssl/slave.key

650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M02/8B/F0/wKiom1hc2YaimE5nAACBN_vN0_M944.png-wh_500x0-wm_3 -wmp_4-s_1197833451.png "title=" 1.png "alt=" Wkiom1hc2yaime5naacbn_vn0_m944.png-wh_50 "/>

This article is from "Never give up!" Ningzhiyuan "blog, be sure to keep this source http://renzhiyuan.blog.51cto.com/10433137/1885561

MySQL master-slave SSL encryption transmission error resolution