java+mysql安全性_Java连接Mysql数据库警告：Establishing SSL connection

【异常日志】

Sun Apr 22 23:25:23 CST 2018 WARN: Establishing SSL connection without server's identity verification is not recommended. According to MySQL 5.5.45+, 5.6.26+ and 5.7.6+ requirements SSL connection must be established by default if explicit option isn't set. For compliance with existing applications not using SSL the verifyServerCertificate property is set to 'false'. You need either to explicitly disable SSL by setting useSSL=false, or set useSSL=true and provide truststore for server certificate verification.

【问题分析】

高版本MySQL中为保证数据库连接的安全性，已经强制使用SSL连接。

【解决方案】

配置使用SSL连接，具体方法为MySQL连接字符串中添加useSSL=true参数(如果是MySQL服务端证书使用的不受信任的自签发证书，还需要添加verifyServerCertificate=false参数)。如：

jdbc:mysql://localhost:3306/test?characterEncoding=utf8&useSSL=true&verifyServerCertificate=false

【另一种解决思路】

使用低版本数据连接驱动。