[sr-dev] running out of mysql connections when [group] is given
Juha Heinanen
jh at tutpro.com
Fri Jan 23 01:10:13 CET 2015
Daniel-Constantin Mierla writes:
> I checked the dependencies of packages on wheezy and libmysqlclient is
> not listed for mysql-client, so the later is not using the lib.
ok.
> > i have all wanted options in [client] group:
> >
> > [client]
> > port = 3306
> > socket = /var/run/mysqld/mysqld.sock
> > ssl-ca=/etc/mysql/cacert.pem
> >
> > according to mysql 5.5 ref man, ssl-ca option implies ssl option and
> > those are enough for mysql cli client to use ssl.
>
> What page did you read?
i don't know about page number but here is the text:
--ssl-ca=file_name
The path to a file in PEM format that contains a list of trusted SSL
certificate authorities. This option implies --ssl.
> That could be for mysql client cli tool, but
> appears it doesn't apply to libmysql client -- at the bottom of the next
> link, it says that a specific function has to be used in c code to set
> the certificates and enable connecting via tls:
>
> - http://dev.mysql.com/doc/refman/5.5/en/using-ssl-connections.html
here is the text:
The C API enables application programs to use SSL:
To establish a secure connection, use the mysql_ssl_set() C API
function to set the appropriate certificate options before calling
mysql_real_connect(). See Section 23.8.7.67, “mysql_ssl_set()”.
so if [client] has ssl-ca option, mysql_ssl_set() should be called?
-- juha
More information about the sr-dev
mailing list