Re: [CentOS] mysql replication - problems

2015-03-13 Thread James B. Byrne
On Thu, March 12, 2015 11:49, Tim Dunphy wrote: > > Ok, yeah I can understand that. I'll correct it. Still need a way to > get SSL enabled however. Any suggestions there? The method we use is to create an application specific directory under /etc/pki and place its certificates and keys in there.

Re: [CentOS] mysql replication - problems

2015-03-12 Thread Tim Dunphy
Hey Alberto, Perfect! Thanks for your response. Moving the certs and keys to an alternate location worked exactly right. Master: MariaDB [(none)]> show variables like '%ssl%'; +---+--+ | Variable_name | Value| +---+-

Re: [CentOS] mysql replication - problems

2015-03-12 Thread Alberto Rivera Laporte
On Thu, Mar 12, 2015 at 10:49 AM Tim Dunphy wrote: > > > > No: /etc/pki/CA should NOT be group writeable. Ditto for > > /etc/pki/tls/cernts and private > > > Ok, yeah I can understand that. I'll correct it. Still need a way to get > SSL enabled however. Any suggestions there? > > I totally misrea

Re: [CentOS] mysql replication - problems

2015-03-12 Thread Alberto Rivera Laporte
On Thu, Mar 12, 2015 at 10:49 AM Tim Dunphy wrote: > > > > No: /etc/pki/CA should NOT be group writeable. Ditto for > > /etc/pki/tls/cernts and private > I agree - Sorry I did not mean to imply that the directory permissions on /etc/pki/CA should be modified. However it was mentioned it as a

Re: [CentOS] mysql replication - problems

2015-03-12 Thread Valeri Galtsev
On Thu, March 12, 2015 10:40 am, m.r...@5-cent.us wrote: > Tim Dunphy wrote: >>> >>> The mysqld process runs as the mysql user. It's parent which is the >>> mysqld_safe runs as the root user. That being said the mysql user >>> needs to have at least read permission to the locations where the ss

Re: [CentOS] mysql replication - problems

2015-03-12 Thread Tim Dunphy
> > No: /etc/pki/CA should NOT be group writeable. Ditto for > /etc/pki/tls/cernts and private Ok, yeah I can understand that. I'll correct it. Still need a way to get SSL enabled however. Any suggestions there? Thanks Tim On Thu, Mar 12, 2015 at 11:40 AM, wrote: > Tim Dunphy wrote: > >> > >>

Re: [CentOS] mysql replication - problems

2015-03-12 Thread m . roth
Tim Dunphy wrote: >> >> The mysqld process runs as the mysql user. It's parent which is the >> mysqld_safe runs as the root user. That being said the mysql user >> needs to have at least read permission to the locations where the ssl files >> are located. By default on Centos the /etc/pki/CA/p

Re: [CentOS] mysql replication - problems

2015-03-12 Thread Tim Dunphy
> > The mysqld process runs as the mysql user. It's parent which is the > mysqld_safe runs as the root user. That being said the mysql user needs > to have at least read permission to the locations where the ssl files are > > located. By default on Centos the /etc/pki/CA/private directory ha

Re: [CentOS] mysql replication - problems

2015-03-12 Thread Alberto Rivera Laporte
On Thu, Mar 12, 2015 at 8:57 AM Tim Dunphy wrote: > Hey everybody, > > I'm trying to get mysql master/slave replication to work under SSL. I've > created the certs for both the slave and the master. I've configured the > master and slave my.cnf. And it does appear that replication is actually >