Server Fault is a question and answer site for system and network administrators. It only takes a minute to sign up.
Sign up to join this community
I'm trying set ssl connection with MySQL Server. I've read this and many more articles https://dev.mysql.com/doc/refman/5.7/en/using-secure-connections.html
There is one thing i still don't know, does client certificate and key have to be generated with the same ca-key, as server sertificates? I don't have access to the server configuration, so I can't do anything server-side.
Do client certificate and key have to be generated with the same ca-key, as server certificates?
No, the main requirement for the client certificate is that the server trusts the CA which has signed that client certificate. In theory you can even trust multiple CA's and use client certificates from completely different sources.
Which CA has signed the server certificate of the MySQL server is irrelevant to the client authentication. (It should of course still be a CA that is trusted on the client...) I.e. you can use a letsencrypt server certificate and use your own internal CA so sign client certificates.
In addition: typically the CA only signs the public key/certificate and it does not generate private keys. (You generate a private key and certificate signing request (CSR) on the system which will using it. The private key then never leaves that system and the CSR is sent to the CA which returns a signed certificate.)
