944 B
944 B
MaxScale and SSL
MaxScale supports client side SSL connections. Enabling is done on a per service basis and each service has its own set of certificates.
SSL Options
Here are the options which relate to SSL and certificates.
| Parameter | Values | Description |
|---|---|---|
| ssl | disabled, enabled, required | disable disables SSL, enabled enables SSL for client connections but still allows non-SSL connections and required requires SSL from all client connections. With the required option, client connections that do not use SSL will be rejected. |
| ssl_cert | Path to server certificate | |
| ssl_key | Path to server private key | |
| ssl_ca_cert | Path to Certificate Authority file | |
| ssl_version | SSLV2,SSLV3,TLSV10,TLSV11,TLSV12,MAX | The SSL method level, defaults to highest available encryption level which is TLSv1.2 |