I want to enable MySQL SSL. I have all the certificates and keys in
/etc/ssl/private/myhost. They are also (successfully) used by Apache2.
I don't have SELinux or AppArmor running.
my.cnf as follows
#ssl ssl-ca=/etc/ssl/private/myhost/myhost.ca_bundle ssl-cert=/etc/ssl/private/myhost/myhost.crt ssl-key=/etc/ssl/private/myhost/myhost.key ssl-cipher=DHE-RSA-AES256-SHA
I have set permissions so that users in the
ssl-private group can read the files, and added all required daemons (ie.
postfix) to that group. Permissions look like follows
myhost:/etc/ssl/private/myhost # l total 32K drwxr-xr-x 2 root ssl-private 4,0K lug 14 13:11 . drwxrwx--- 4 root ssl-private 4,0K lug 14 12:32 .. -rw-r--r-- 1 root ssl-private 1,5K mag 30 2000 AddTrustExternalCARoot.crt -rw-r--r-- 1 root ssl-private 3,3K lug 14 13:11 myhost.ca_bundle -rw-r--r-- 1 root ssl-private 2,1K lug 13 22:00 myhost.crt -rw-r--r-- 1 root ssl-private 1,8K lug 14 12:41 myhost.csr -rw-r----- 1 root ssl-private 3,2K lug 14 12:36 myhost.key -rw-r--r-- 1 root ssl-private 1,8K feb 15 23:00 PositiveSSLCA2.crt
I also copied and pasted path of certificate file from my.cnf into command
sudo -u mysql cat /etc/ssl/private/myhost/myhost.crt and it displayed my certificate. The same command worked for the key.
But finally when I start MySQL I get the following error:
SSL error: Unable to get certificate from '/etc/ssl/private/myhost/myhost.crt' 120814 14:20:37 [Warning] Failed to setup SSL 120814 14:20:37 [Warning] SSL error: Unable to get certificate
How can I fix that?