Database Administrators Stack Exchange is a question and answer site for database professionals who wish to improve their database skills and learn from others in the community. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm setting up mysql replication using SSL, and have found two different guides.

The first one creates both client and server certs, while the second one only creates server certs.

I don't know enough about SSL to understand the implication of one option over the other. Should the slave be using the client certs or the server certs?

share|improve this question

No, you don't need client certificates if you only want to encrypt the connection.

But, if you have client certificates, the master can authenticate the slave using the much more secure public/private keys (in addition to the password).

I got pretty frustrated with the other guides, so I put together a very comprehensive step by step guide to setting up encrypted replication. It shows both what's the minimum required to get encryption running, and how to use certs on both sides to beef up authentication.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.