main
HerrHase 1 year ago
parent 07537f7744
commit 582c0bef84

@ -33,18 +33,16 @@ await command('openssl x509 -req -in /etc/mysql/ssl/client-req.pem -days 365000
await command('openssl verify -CAfile /etc/mysql/ssl/ca-cert.pem /etc/mysql/ssl/server-cert.pem /etc/mysql/ssl/client-cert.pem') await command('openssl verify -CAfile /etc/mysql/ssl/ca-cert.pem /etc/mysql/ssl/server-cert.pem /etc/mysql/ssl/client-cert.pem')
await command('cat >> /etc/mysql/my.cnf << EOF await command('cat >> /etc/mysql/my.cnf << EOF' +
[mysqld] '[mysqld]' +
bind-address = 0.0.0.0 'bind-address = 0.0.0.0' +
'ssl-ca=/etc/mysql/ssl/ca-cert.pem' +
ssl-ca=/etc/mysql/ssl/ca-cert.pem 'ssl-cert=/etc/mysql/ssl/server-cert.pem' +
ssl-cert=/etc/mysql/ssl/server-cert.pem 'ssl-key=/etc/mysql/ssl/server-key.pem' +
ssl-key=/etc/mysql/ssl/server-key.pem '[client]' +
'ssl-ca=/etc/mysql/ssl/ca-cert.pem' +
[client] 'ssl-cert=/etc/mysql/ssl/client-cert.pem' +
ssl-ca=/etc/mysql/ssl/ca-cert.pem 'ssl-key=/etc/mysql/ssl/client-key.pem')
ssl-cert=/etc/mysql/ssl/client-cert.pem
ssl-key=/etc/mysql/ssl/client-key.pem')
await command('chown -R mysql:mysql /etc/mysql/ssl') await command('chown -R mysql:mysql /etc/mysql/ssl')
await command('chmod 644 /etc/mysql/ssl/*cert*') await command('chmod 644 /etc/mysql/ssl/*cert*')

Loading…
Cancel
Save