MySQL Variables ssl_cipher 数据库 参数变量解释及正确配置使用

本站中文解释

SSL_CIPHER用于控制MySQL服务器上可以支持的TLS/SSL加密套件组合。在默认情况下，MySQL将使用TLS v1.0以后的标准协议和高强度加密机制，其中包括ECDHE-RSA-AES256-GCM-SHA384和DHE-RSA-AES256-GCM-SHA384等。考虑到安全性和性能，您可以根据实际情况仅包含最佳加密套件并极大地减少SSL_CIPHER。若要设置SSL_CIPHER，您可以编辑的MySQL配置文件my.cnf，添加ssl-cipher参数，例如ssl-cipher=ECDHE-RSA-AES256-GCM-SHA384 。

官方英文解释 ssl_cipher

The list of permissible ciphers for connection encryption. If
no cipher in the list is supported, encrypted connections do
not work.

For greatest portability, the cipher list should be a list of
one or more cipher names, separated by colons. This format is
understood both by OpenSSL and yaSSL. The following example
shows two cipher names separated by a colon:

[mysqld]

ssl_cipher="DHE-RSA-AES128-GCM-SHA256:AES128-SHA"

OpenSSL supports a more flexible syntax for specifying
ciphers, as described in the OpenSSL documentation at
https://www.openssl.org/docs/manmaster/man1/openssl-ciphers.html.
yaSSL does not, so attempts to use that extended syntax fail
for a MySQL distribution compiled using yaSSL.

For information about which encryption ciphers MySQL supports,
see Section 6.3.2, “Encrypted Connection TLS Protocols and Ciphers”.

我想要获取技术服务或软件
服务范围：MySQL、ORACLE、SQLSERVER、MongoDB、PostgreSQL 、程序问题
服务方式：远程服务、电话支持、现场服务，沟通指定方式服务
技术标签：数据恢复、安装配置、数据迁移、集群容灾、异常处理、其它问题

本站部分文章参考或来源于网络，如有侵权请联系站长。
数据库远程运维 MySQL Variables ssl_cipher 数据库 参数变量解释及正确配置使用