List:General Discussion« Previous MessageNext Message »
From:Jackie Zhang Date:November 25 2012 1:27am
Subject:Re: Failed to setup SSL
View as plain text  
Thanks, Michael.

I used the absolute paths but it still does not work. I think the problem
is not because of the relative path because the example showed in the
manual also uses relative path (see below):

shell> *mysqld --ssl-ca=ca-cert.pem \*
         *--ssl-cert=server-cert.pem \*
         *--ssl-key=server-key.pem

*

For the permission, I used exactly the same as Reindl's (I used his
scripts).

Since the error messages are still the same, I guess there should be
something else wrong?

Best regards,
Jackie


On Sat, Nov 24, 2012 at 5:15 PM, Michael Dykman <mdykman@stripped> wrote:

> I had noticed that the paths to your certificates were expressed  as
> relative paths. I think at least part of Reindl's recommendation was to
> express fully qualified paths to your certs and to examined the permissions
> on those files carefully. SSL is very particular about rejecting  security
> files which have too-permisive permissions..
>
> also, considered tailing /var/log/secure
>
>  On 2012-11-24 8:05 PM, "Jackie Zhang" <jackie.qq.zhang@stripped> wrote:
>
> Dear Reindl,
>
> Thanks a lot for the reply!
>
> I tried your scripts (the only difference is the openssl.cnf because I
> don't have it)
>
> Unfortunately, I still failed to start the server with the same message:
>
> 121124 17:00:06 [Warning] Failed to setup SSL
> 121124 17:00:06 [Warning] SSL error: Failed to set ciphers to use
>
> Do you have any idea from the log message?
>
> Best regards,
> Jackie
>
>
> On Sat, Nov 24, 2012 at 4:02 PM, Reindl Harald <h.reindl@stripped
> >wrote:
>
>
> >
> >
> > Am 25.11.2012 00:30, schrieb Jackie Zhang:
> > > Hello everyone,
> > >
> > > I want to setup SSL fo...
>
>

Thread
Failed to setup SSLJackie Zhang24 Nov
  • Re: Failed to setup SSLReindl Harald25 Nov
    • Re: Failed to setup SSLJackie Zhang25 Nov
Re: Failed to setup SSLMichael Dykman25 Nov
  • Re: Failed to setup SSLJackie Zhang25 Nov