广州明生堂生物科技有限公司


MySQL Variables ssl_cipher 数据库 参数变量解释及正确配置使用

网络编程 MySQL Variables ssl_cipher 数据库 参数变量解释及正确配置使用 10-15

本站中文解释

SSL_CIPHER用于控制MySQL服务器上可以支持的TLS/SSL加密套件组合。在默认情况下,MySQL将使用TLS v1.0以后的标准协议和高强度加密机制,其中包括ECDHE-RSA-AES256-GCM-SHA384和DHE-RSA-AES256-GCM-SHA384等。考虑到安全性和性能,您可以根据实际情况仅包含最佳加密套件并极大地减少SSL_CIPHER。若要设置SSL_CIPHER,您可以编辑的MySQL配置文件my.cnf,添加ssl-cipher参数,例如ssl-cipher=ECDHE-RSA-AES256-GCM-SHA384 。

官方英文解释

ssl_cipher

Command-Line Format--ssl-cipher=name
System Variablessl_cipher
ScopeGlobal
DynamicNo
TypeString
Default ValueNULL

The list of permissible ciphers for connection encryption. If
no cipher in the list is supported, encrypted connections do
not work.

For greatest portability, the cipher list should be a list of
one or more cipher names, separated by colons. This format is
understood both by OpenSSL and yaSSL. The following example
shows two cipher names separated by a colon:

[mysqld]ssl_cipher="DHE-RSA-AES128-GCM-SHA256:AES128-SHA"

OpenSSL supports a more flexible syntax for specifying
ciphers, as described in the OpenSSL documentation at
https://www.openssl.org/docs/manmaster/man1/openssl-ciphers.html.
yaSSL does not, so attempts to use that extended syntax fail
for a MySQL distribution compiled using yaSSL.

For information about which encryption ciphers MySQL supports,
see Section 6.3.2, “Encrypted Connection TLS Protocols and Ciphers”.


编辑:广州明生堂生物科技有限公司

标签:您可以,套件,组合,英文,考虑到