mysql ssl jdbc_【MySQL&SSL&JAVA】关于MySQL开启SSL后，jdbc的配置

一、MySQL服务端配置

# vim   /etc/my.cnf

###########################################

[mysqld]

require_secure_transport = ON

ssl-ca                   = /var/lib/mysql/ca.pem

ssl-cert                 = /var/lib/mysql/server-cert.pem

ssl-key                  = /var/lib/mysql/server-key.pem

############################################

# mysql  -u root  -p"MySQL@123"

mysql>  ALTER USER 'root'@'%' REQUIRE SSL;

mysql> FLUSH PRIVILEGES;

mysql> exit

# systemctl restart mysqld

二、java应用的jdbc配置

MySQL驱动

driverClassName=com.mysql.cj.jdbc.Driver

url=jdbc:mysql://xx.xx.xx.xx:3306/test?allowMultiQueries=true&useUnicode&characterEncoding=UTF-8&autoReconnect=true&useSSL=true&verifyServerCertificate=false&requireSSL=true

username=root

password=MySQL@123

MariaDB驱动

driverClassName=org.mariadb.jdbc.Driver

url=jdbc:mariadb://xx.xx.xx.xx:3306/test?allowMultiQueries=true&useUnicode&characterEncoding=UTF-8&autoReconnect=true&useSSL=true&trustServerCertificate=true&requireSSL=true

username=root

password=MySQL@123

关于证书信任设置

MySQL:    verifyServerCertificate=false

MariaDB:  trustServerCertificate=true

##########################################

database: test

mysqldb:

datasource:

driverClassName: com.mysql.jdbc.Driver

url: jdbc:mysql://xx.xx.xx.xx:3306/${database}

username: test

password: Test@123

##########################################

三、参考

How To Configure SSL/TLS for MySQL on CentOS7.x?

https://www.jianshu.com/p/d0bc851b9844

关于对MySQL开启SSL的理解

https://www.jianshu.com/p/4f5957c394db

MySQL的jdbc驱动 com.mysql.jdbc.Driver 和 com.mysql.cj.jdbc.Driver的区别

https://www.cnblogs.com/liaojie970/p/8916568.html

https://blog.csdn.net/superdangbo/article/details/78732700

MariaDB Connector/J

https://mariadb.com/kb/en/library/about-mariadb-connector-j

https://github.com/MariaDB/mariadb-connector-j/blob/master/documentation/use-mariadb-connector-j-driver.creole