Connecting MariaDB through Secure Socket Layer

MariaDB supports the Secure Socket Layer (SSL) connections. In order to use SSL, MariaDB must be compiled with yaSSL or OpenSSL. Binary packages are built with yaSSL. To check whether our local installation has SSL support, we can look at the have_ssl server variable. If its value is YES, SSL is supported and configured; if its value is DISABLED, SSL is supported but not yet configured; and if its value is NO, SSL is not supported. For example:

MariaDB [(none)]> SELECT @@global.have_ssl;

+-------------------+

| @@global.have_ssl |

+-------------------+

| DISABLED          |

+-------------------+

1 row in set (0.00 sec)

To configure SSL, we first need to create a certificate (released by a Certification Authority also known as CA), and public and private keys for both the server and clients that need to use SSL. The certificate and keys can be generated with the OpenSSL program, which is a free software. It is usually already installed...