MySQL 8 Cookbook

How to do it...

1. On the master, as explained in the preceding section, you need to enable SSL.
2. On the master, copy the client* certificates to the slave:

mysql> sudo scp -i $HOME/.ssh/id_rsa /var/lib/mysql/client-key.pem /var/lib/mysql/client-cert.pem <user>@<client_ip>:

3. On the slave, create the mysql-ssl directory to hold the SSL-related files and set the permissions correctly:

shell> sudo mkdir /etc/mysql-sslshell> sudo cp client-key.pem client-cert.pem /etc/mysql-ssl/shell> sudo chown -R mysql:mysql /etc/mysql-sslshell> sudo chmod 600 /etc/mysql-ssl/client-key.pemshell> sudo chmod 644 /etc/mysql-ssl/client-cert.pem

4. On the slave, execute the CHANGE_MASTER command with the SSL-related changes on the slave:

mysql> STOP SLAVE;mysql> CHANGE ...