spring openssl mysql,如何配置Spring Boot应用程序以通过MySQL使用SSL / TLS？

I set up SSL on my MySQL server.

I generated few certicates for CA (ca.pem, ca-key.pem), for client (client-cert.pem, client-key.pem) and server (server-cert.pem and server-key.pem).

In spring boot configuration file, here is the link to MySQL defined in application.yml file

: jdbc:mysql://host:3306/bdd_name?useUnicode=true&characterEncoding=utf8&useSSL=true&requireSSL=true

I verify that my certicates are with openssl verify and I verify also by using a mysql client to set up a connection.

How to set the link Spring Boot application to my certificates (I have *.pem files) to finish my configuration ?

解决方案

You need to add the "*.pem" files (cert and key) in a keystore and the CA in a "truststore".

After you have to add in JVM paramaters

-Djavax.net.ssl.keyStore=/path/to/keystore/keystore.jks

-Djavax.net.ssl.keyStorePassword=password

-Djavax.net.ssl.trustStore=/path/to/keystore/truststore.jks

-Djavax.net.ssl.trustStorePassword=password