如何在 MySQL 社区服务器上禁用 ssl 插件？ [关闭]答案

【问题标题】：How to disable ssl plugin on MySQL community server? [closed]如何在 MySQL 社区服务器上禁用 ssl 插件？ [关闭]
【发布时间】：2016-08-06 01:57:03
【问题描述】：

MySQL 服务器上新引入的 SSL 连接现在默认安装在 CentOS 6.7 默认代表上。

只要删除证书文件就可以通过Docs解决：

“如果服务器在数据目录中没有找到有效的证书和密钥文件，它会继续执行，但不会启用安全连接。” 参考：http://dev.mysql.com/doc/refman/5.7/en/secure-connections.html

但我想完全禁用 mysql 服务器上的 SSL 连接插件，因为我想通过删除我不使用的所有内容来优化 MySQL 服务器的性能，包括这个插件。

如何在 MySQL 社区服务器上禁用 ssl？

【问题讨论】：

来自文档：If the server does not find valid certificate and key files in the data directory, it continues executing but does not enable secure connections.。见7.3.11.5 Command Options for Secure Connections。
但是当我删除它时，服务器在每次连接时都会给我很长时间的警告。我想禁用它。

标签： mysql centos centos6

【解决方案1】：

我的测试：

$ mysql -u root -p
Enter password:

Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 3
Server version: 5.7.12 MySQL Community Server (GPL)

Copyright (c) 2000, 2016, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql> SHOW VARIABLES LIKE '%ssl%';
+---------------+-----------------+
| Variable_name | Value           |
+---------------+-----------------+
| have_openssl  | YES             |
| have_ssl      | YES             |
| ssl_ca        | ca.pem          |
| ssl_capath    |                 |
| ssl_cert      | server-cert.pem |
| ssl_cipher    |                 |
| ssl_crl       |                 |
| ssl_crlpath   |                 |
| ssl_key       | server-key.pem  |
+---------------+-----------------+
9 rows in set (0.00 sec)

文件：/path/to/file/my.cnf

[mysqld]
...

skip_ssl
# disable_ssl

...

$ service mysql restart

$ mysql -u root -p
Enter password:

Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 3
Server version: 5.7.12 MySQL Community Server (GPL)

Copyright (c) 2000, 2016, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql> SHOW VARIABLES LIKE '%ssl%';
+---------------+----------+
| Variable_name | Value    |
+---------------+----------+
| have_openssl  | DISABLED |
| have_ssl      | DISABLED |
| ssl_ca        |          |
| ssl_capath    |          |
| ssl_cert      |          |
| ssl_cipher    |          |
| ssl_crl       |          |
| ssl_crlpath   |          |
| ssl_key       |          |
+---------------+----------+
9 rows in set (0.00 sec)

【讨论】：

似乎不适用于 MySQL 8.0 和 Windows 10
它正在工作。我尝试使用 mysql 8.0.14，windows server 2016。只需在 my.ini 中添加 skip_ssl 即可，无需删除证书文件。但是现在你应该使用 mysql_native_password 身份验证插件。