Advanced MySQL 8

SSL

To make sure that the connections on which members of the group communicate, we can set up SSL certificates to make it secure. We can do so by setting the following variables. Group communication connections as well as recovery connections are secured using SSL. At the time of joining the group while set up, or in recovery process, we set up a user who has InnoDB REPLICATION SLAVE permission. We have to set up the user for SSL using the following commands:

mysql> SET SQL_LOG_BIN=0;mysql> CREATE USER 'rec_ssl_user'@'%' REQUIRE SSL;mysql> GRANT replication slave ON *.* TO 'rec_ssl_user'@'%';mysql> SET SQL_LOG_BIN=1;

On the server which is joining the group:

mysql> SET GLOBAL group_replication_recovery_use_ssl=1;mysql> SET GLOBAL group_replication_recovery_ssl_ca='../cert.pem'; ...