Database Administrators Stack Exchange is a question and answer site for database professionals who wish to improve their database skills and learn from others in the community. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am in the process of replicating my database so i can have a master slave configuration, one of the issues i have is with security i am basically generating my server/client keys and certificates using openssl i also generate my own CA key and certificate to self sign, i understand the issues with self signing certificates on a public website, but do you think this will be as a serious problem when used in replication?

share|improve this question
up vote 2 down vote accepted

It's a problem in public websites because you can't email your shiny new CA key to everybody on the Internet. So instead by convention browsers ship with a small list of CAs (Verisign and friends) and we all buy certificates from them.

In database replication, you can visit both servers and install your new CA key. As long as you trust you, and you don't want strangers to authenticate to your database, you're probably in the clear.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.