MariaDB 无 SSL 密码

Question

尝试解决为什么我无法使用 SSL 连接我的客户端

我注意到 SSL 密码不存在，但 OPENSSL 和 HAVE_SSL 都是 YES。谁能告诉我如何解决这个问题？

我在日志中没有收到任何错误

MariaDB [(none)]> SHOW VARIABLES LIKE '%ssl%';
+---------------------+----------------------------+
| Variable_name       | Value                      |
+---------------------+----------------------------+
| have_openssl        | YES                        |
| have_ssl            | YES                        |
| ssl_ca              | /etc/certs/ca-cert.pem     |
| ssl_capath          |                            |
| ssl_cert            | /etc/certs/server-cert.pem |
| ssl_cipher          |                            |
| ssl_crl             |                            |
| ssl_crlpath         |                            |
| ssl_key             | /etc/certs/server-key.pem  |
| version_ssl_library | OpenSSL 3.0.2 15 Mar 2022  |
+---------------------+----------------------------+
10 rows in set (0.002 sec)

MariaDB [(none)]> \s
--------------
mysql  Ver 15.1 Distrib 10.9.2-MariaDB, for debian-linux-gnu (aarch64) using  EditLine wrapper

Connection id:      15
Current database:
Current user:       root@localhost
SSL:            Cipher in use is TLS_AES_256_GCM_SHA384
Current pager:      stdout
Using outfile:      ''
Using delimiter:    ;
Server:         MariaDB
Server version:     10.9.2-MariaDB-1:10.9.2+maria~ubu2204 mariadb.org binary distribution
Protocol version:   10
Connection:     Localhost via UNIX socket
Server characterset:    utf8mb4
Db     characterset:    utf8mb4
Client characterset:    latin1
Conn.  characterset:    latin1
UNIX socket:        /run/mysqld/mysqld.sock
Uptime:         1 hour 33 min 32 sec

Answer 1

ssl_cipher

变量是一个全局只读变量，如果例如您的配置文件包含条目 ssl_cipher=value

要获取当前连接的密码套件，请在 mysql 命令行客户端中使用

\s

(=status)（如 danblack 建议），或者在 SQL 中检查状态变量

ssl_cipher

:

MariaDB [(none)]> show status like 'ssl_cipher';
+---------------+------------------------+
| Variable_name | Value                  |
+---------------+------------------------+
| Ssl_cipher    | TLS_AES_256_GCM_SHA384 |
+---------------+------------------------+