hcq/MaxScale
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

MXS-2382: Add TLS setup into server tutorial

Browse Source 
Given the recent fixes to the TLS configuration, the process of enabling
TLS is rather simple.
This commit is contained in:
Markus Mäkelä
2020-02-17 20:11:28 +02:00
parent 405b10ad50
commit cb96725a51
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
Documentation/Tutorials/Configuring-Servers.md
View File

@ -25,3 +25,16 @@ protocol=MariaDBBackend
The `address` and `port` parameters tell where the server is located. The The `address` and `port` parameters tell where the server is located. The
`protocol` should always be set to `MariaDBBackend`. `protocol` should always be set to `MariaDBBackend`.
## Enabling TLS
To enable encryption for the MaxScale-to-MariaDB communication, add `ssl=true`
to the server section. To enable server certificate verification, add
`ssl_verify_peer_certificate=true`.
The `ssl` and `ssl_verify_peer_certificate` parameters are similar to the
`--ssl` and `--ssl-verify-server-cert` options of the `mysql` command line
client.
For more information about TLS, refer to the
[Configuration Guide](../Getting-Started/Configuration-Guide.md).