MySQL 8 Cookbook

How to do it...

1. Verify the files in the data directory, update my.cnf, restart the server, and check the SSL-related variables. In MySQL 8, by default, the following values are set:

shell> sudo ls -lhtr /var/lib/mysql | grep pem-rw-------. 1 mysql mysql 1.7K Nov 19 13:53 ca-key.pem-rw-r--r--. 1 mysql mysql 1.1K Nov 19 13:53 ca.pem-rw-------. 1 mysql mysql 1.7K Nov 19 13:53 server-key.pem-rw-r--r--. 1 mysql mysql 1.1K Nov 19 13:53 server-cert.pem-rw-------. 1 mysql mysql 1.7K Nov 19 13:53 client-key.pem-rw-r--r--. 1 mysql mysql 1.1K Nov 19 13:53 client-cert.pem-rw-------. 1 mysql mysql 1.7K Nov 19 13:53 private_key.pem-rw-r--r--. 1 mysql mysql  451 Nov 19 13:53 public_key.pem

shell> sudo vi /etc/my.cnf[mysqld]ssl-ca=/var/lib/mysql/ca.pem ...