up vote 0 down vote favorite
2
share [g+] share [fb]

I successfully configured a MySQL replication over SSL between 2 servers accross the internet. Now I want a second server in the same location as the replication slave, to open a connection to the master db over ssl.

I used the same command found here http://dev.mysql.com/doc/refman/5.1/en/secure-create-certs.html to generate a new set of client-cert.pem and client-key.pem with the same master db ca-cert/key.pem and I also used a different Common Name.

When I try to initiate a connection between this new server and the master db, it fails :

mysql -hmasterdb -utestssl -p --ssl-ca=/var/lib/mysql/newcerts/ca-cert.pem --ssl-cert=/var/lib/mysql/newcerts/client-cert.pem --ssl-key=/var/lib/mysql/newcerts/client-key.pem

ERROR 2026 (HY000): SSL connection error

It's working without SSL.

link|improve this question
54% accept rate
Could you please add the output of openssl x509 -in <YOURCERT> -subject -issuer -nameopt multiline,show_type -noout -subject_hash -issuer_hash for the all 3 certs? (both working, and the new one) – Thomas Berger Jun 29 '11 at 0:02
They all 3 have the same issuer/issuer_hash. Everything else is exactly the same, exact the Common Name. – Bastien974 Jun 29 '11 at 13:12
I had to reinstall the exact same version to make it work, seems that my 5.1.33.glibc 'server' doesn't accept ssl connection coming from 5.0 or 5.5 !! – Bastien974 Jun 29 '11 at 21:32
feedback

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
or
required, but never shown
discard

Browse other questions tagged or ask your own question.