MXS-2382: Add TLS setup into server tutorial

Given the recent fixes to the TLS configuration, the process of enabling
TLS is rather simple.
This commit is contained in:
Markus Mäkelä 2020-02-17 20:11:28 +02:00
parent 405b10ad50
commit cb96725a51
No known key found for this signature in database
GPG Key ID: 5CE746D557ACC499

View File

@ -25,3 +25,16 @@ protocol=MariaDBBackend
The `address` and `port` parameters tell where the server is located. The
`protocol` should always be set to `MariaDBBackend`.
## Enabling TLS
To enable encryption for the MaxScale-to-MariaDB communication, add `ssl=true`
to the server section. To enable server certificate verification, add
`ssl_verify_peer_certificate=true`.
The `ssl` and `ssl_verify_peer_certificate` parameters are similar to the
`--ssl` and `--ssl-verify-server-cert` options of the `mysql` command line
client.
For more information about TLS, refer to the
[Configuration Guide](../Getting-Started/Configuration-Guide.md).