Commit 7341c028 authored by Nathan Ward's avatar Nathan Ward
Browse files

Disable TLS for MySQL

parent eb1f67fc

templates/sql.conf.erb

+11 −11
Original line number Diff line number Diff line
@@ -84,17 +84,17 @@ sql <%= @name %> { 


	mysql {

		# If any of the files below are set, TLS encryption is enabled

		tls {

			ca_file = "/etc/ssl/certs/my_ca.crt"

			ca_path = "/etc/ssl/certs/"

			certificate_file = "/etc/ssl/certs/private/client.crt"

			private_key_file = "/etc/ssl/certs/private/client.key"

			cipher = "DHE-RSA-AES256-SHA:AES128-SHA"



			tls_required = yes

			tls_check_cert = no

			tls_check_cert_cn = no

		}

#		tls {

#			ca_file = "/etc/ssl/certs/my_ca.crt"

#			ca_path = "/etc/ssl/certs/"

#			certificate_file = "/etc/ssl/certs/private/client.crt"

#			private_key_file = "/etc/ssl/certs/private/client.key"

#			cipher = "DHE-RSA-AES256-SHA:AES128-SHA"

#

#			tls_required = yes

#			tls_check_cert = no

#			tls_check_cert_cn = no

#		}



		# If yes, (or auto and libmysqlclient reports warnings are

		# available), will retrieve and log additional warnings from