MySQL : Différence entre versions

De Wiki NCad
Aller à : navigation, rechercher
(Création du certificat auto-signé)
(Création du certificat auto-signé)
Ligne 17 : Ligne 17 :
 
* On lance la création de certificat auto-signé :
 
* On lance la création de certificat auto-signé :
  
{{ Box Console | objet=openssl req -new -x509 -nodes -days 500 -key mysql.key -out mysql.crt<br />
+
{{ Box Console | objet=openssl req -new -x509 -nodes -days 500 -key ca.key -out ca.crt<br />
 
<font color=grey>You are about to be asked to enter information that will be incorporated<br />
 
<font color=grey>You are about to be asked to enter information that will be incorporated<br />
 
into your certificate request.<br />
 
into your certificate request.<br />
Ligne 26 : Ligne 26 :
 
- - - --<br /></font>
 
- - - --<br /></font>
 
Country Name (2 letter code) [AU]:FR<br />
 
Country Name (2 letter code) [AU]:FR<br />
State or Province Name (full name) [Some-State]:Lunan<br />
+
State or Province Name (full name) [Some-State]:Paris<br />
Locality Name (eg, city) []:Lunan<br />
+
Locality Name (eg, city) []:Paris<br />
 
Organization Name (eg, company) [Internet Widgits Pty Ltd]:NCad Network<br />
 
Organization Name (eg, company) [Internet Widgits Pty Ltd]:NCad Network<br />
 
Organizational Unit Name (eg, section) []:Intranet Goulouxiou<br />
 
Organizational Unit Name (eg, section) []:Intranet Goulouxiou<br />
 
Common Name (e.g. server FQDN or YOUR name) []:10.0.0.47<br />
 
Common Name (e.g. server FQDN or YOUR name) []:10.0.0.47<br />
 
Email Address []:tech@ncad.fr }}
 
Email Address []:tech@ncad.fr }}

Version du 4 février 2014 à 17:18

SSL

Création de la clé privée

  • On se place dans le dossier /etc/ssl/private qui contient les clés et certificats privées :
ICON Terminal.png

cd /etc/ssl/private

  • On génère la clé privée :
ICON Terminal.png

sudo openssl genrsa -out mysql.key 2048

Cette clé va nous permettre de signer nos propres certificats.

Création du certificat auto-signé

  • On lance la création de certificat auto-signé :
ICON Terminal.png

openssl req -new -x509 -nodes -days 500 -key ca.key -out ca.crt
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
- - - --
Country Name (2 letter code) [AU]:FR
State or Province Name (full name) [Some-State]:Paris
Locality Name (eg, city) []:Paris
Organization Name (eg, company) [Internet Widgits Pty Ltd]:NCad Network
Organizational Unit Name (eg, section) []:Intranet Goulouxiou
Common Name (e.g. server FQDN or YOUR name) []:10.0.0.47
Email Address []:tech@ncad.fr