New! MySQLUtilitiesNowSupportsSSLandConfigurationFile

Source: Internet
Author: User
Tags ssl certificate
New! MySQLUtilitiesNowSupportsSSLandConfigurationFiles The https://www.php1.cn/wiki/1160.html "target =" _ blank "> MySQL Utilities Team is pleased to announce a new release that contains our newest features-SSL and configuration file support. these were added to release-1.5.0-alpha.

How can I make a secure connection to my server via Utilities?

Use the new SSL command-line options that are available for all utilities:

–ssl-ca : The path to a file that contains a list of trusted SSL certificate authorities.–ssl-cert : The name of the SSL certificate file to use for establishing a secure connection.–ssl-key : The name of the SSL key file to use for establishing a secure connection.Then just specify the appropriate values on the command-line with any other parameters.
How can I use configuration files?

If typing all of those SSL options seems tedious, you can specify this information in your configuration file and reference the file via a new syntax. You can also supply a path to the file. Observe.

-Server =

Example:-server =/dev/env/test1/my. cnf [server‑ssl]

In this example, the utility will read the SSL option values from the my. cnf file in/dev/env/test1/looking for them in the serverless SSL section. thus, you can make as your sections as you have servers and/or combinations of login option values. how cool is that?

Here's an example with two entries; the first one has SSL options.

[instance_3307]port=3307user=rootpassword=lilly-passhost=localhostssl-ca=C:/newcerts/cacert.pemssl-cert=C:/newcerts/client-cert.pemssl-key=C:/newcerts/client-key.pem[instance_3308]port=3308user=rootpassword=other-passhost=localhost

As you can see, you can use this new syntax for any connection-SSL or not! No more typing out the user, password, blah, just plug the information into your configuration file and you're done with remembering ports and sockets and passwords and... You get the idea.

SSL Examples
Now let’s see the SSL feature in action. It’s really quite simple.

Example1: Using command-line options:

$ mysqlserverinfo –server=root:pass@localhost:3307 /–ssl-ca=C:/newcerts/cacert.pem /–ssl-cert=C:/newcerts/client-cert.pem /–ssl-key=C:/newcerts/client-key.pem /–format=vertical# Source on localhost: … connected.*************************       1. row *************************server: localhost:3307config_file:binary_log:binary_log_pos:relay_log:relay_log_pos:version: 5.6.15datadir: C:/MySQL/instance_3307/basedir: C:/MySQL/mysql-5.6.15-winx64plugin_dir: C:/MySQL/mysql-5.6.15-winx64/lib/plugin/general_log: OFFgeneral_log_file:general_log_file_size:log_error: C:/MySQL/instance_3307/clone.errlog_error_file_size: 1569 bytesslow_query_log: OFFslow_query_log_file:slow_query_log_file_size:1 row.#…done.
Example2: Using the configuration file specification:
$ mysqlserverinfo –server=c:/MySQL/instance-3307.cnf[instance_3307] /–format=vertical# Source on localhost: … connected.*************************       1. row *************************server: localhost:3307config_file:binary_log:binary_log_pos:relay_log:relay_log_pos:version: 5.6.15datadir: C:/MySQL/instance_3307/basedir: C:/MySQL/mysql-5.6.15-winx64plugin_dir: C:/MySQL/mysql-5.6.15-winx64/lib/plugin/general_log: OFFgeneral_log_file:general_log_file_size:log_error: C:/MySQL/instance_3307/clone.errlog_error_file_size: 1569 bytesslow_query_log: OFFslow_query_log_file:slow_query_log_file_size:1 row.#…done.
Configuration File Example

Here, I 've added the following to my configuration file:

[instance_13001]port=13001user=rootpassword=mippippipihost=localhostNow I execute a utility:$ mysqlserverinfo.py –server=my.cnf[instance_13001] –format=vertical# Source on localhost: … connected.*************************       1. row *************************server: localhost:13001config_file: /etc/my.cnf, /etc/mysql/my.cnfbinary_log: clone-bin.000001binary_log_pos: 341relay_log:relay_log_pos:version: 5.6.17-logdatadir: /Volumes/Source/source/temp_13001/basedir: /Volumes/Source/source/bzr/mysql-5.6plugin_dir: /Volumes/Source/source/bzr/mysql-5.6/lib/plugin/general_log: OFFgeneral_log_file:general_log_file_size:log_error:log_error_file_size:slow_query_log: OFFslow_query_log_file:slow_query_log_file_size:1 row.

#... Done.

Wow, now that's easier and it also reduces security concerns by removing the password from the command-line.

But wait, there is an even more secure way to specify passwords: login-paths!

Note: MySQL Utilities version 1.2.1 and later support login-paths.

In the above example, the password is stored in plain-text in the option file. however, if you use login-paths, you can store the same information in a encrypted file (. mylogin. cnf ). wow. no more plain text passwords!

Example: Using login-paths

Use the mysql_config_editor tool (http://dev.mysql.com/doc/en/mysql-config-editor.html) to add the connection information as follows.

$ mysql_config_editor set –login-path=instance_13001 –host=localhost –user=root –port=13001 –passwordEnter password:Next, use the following command to confirm that the login-path data was correctly added to .mylogin.cnf (the encrypted file):$ mysql_config_editor print –login-path=instance_13001[instance_13001]user = rootpassword = *****host = localhostport = 13001

Now, execute the desired utility specifying the login-path section instead of the usual user: passwd @ host: port: socket:

$ mysqlserverinfo –server=instance_13001 –format=vertical# Source on localhost: … connected.*************************       1. row *************************server: localhost:13001config_file: /etc/my.cnf, /etc/mysql/my.cnfbinary_log: clone-bin.000001binary_log_pos: 341relay_log:relay_log_pos:version: 5.6.17-logdatadir: /Volumes/Source/source/temp_13001/basedir: /Volumes/Source/source/bzr/mysql-5.6plugin_dir: /Volumes/Source/source/bzr/mysql-5.6/lib/plugin/general_log: OFFgeneral_log_file:general_log_file_size:log_error:log_error_file_size:slow_query_log: OFFslow_query_log_file:slow_query_log_file_size:1 row.#…done.
How Can I Download MySQL Utilities?

You can download MySQL Utilities 1.5.0-alpha from the following link using one of the pre-built installation repositories including a source download. be sure to click the "Development Releases" tab to see the 1.5.0 version download links.

http://dev.mysql.com/downloads/tools/utilities/
Where is the Documentation?

You can find online documentation for MySQL Utilities version 1.5:

http://dev.mysql.com/doc/mysql-utilities/1.5/en/index.html

The above is New! MySQL Utilities Now Supports SSL and Configuration File. For more information, see PHP Chinese website (www.php1.cn )!

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.