我想配置我的MySQL 8.0.12服务器(在RHEL 7.5上运行),以便为远程访问强制实施SSL连接。
我尝试将以下两行添加到我的/etc/my.cnf文件中(是的,我重新启动了mysqld服务):
[mysqld]
...
bind-address = 0.0.0.0
require_secure_transport = ON
仍然可以在没有SSL连接的情况下登录。配置似乎不会影响相应的MySQL变量:
mysql> SHOW VARIABLES LIKE 'require_secure_transport';
+--------------------------+-------+
| Variable_name | Value |
+--------------------------+-------+
| require_secure_transport | OFF |
+--------------------------+-------+
1 row in set (0.00 sec)
我还尝试通过ALTER命令为特定用户实施SSL:
mysql> ALTER USER my_user@'%' REQUIRE SSL WITH MAX_CONNECTIONS_PER_HOUR 30 MAX_USER_CONNECTIONS 10;
Query OK, 0 rows affected (0.00 sec
)
仍然没有成功。关于我所缺少的任何想法吗?