Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

...

...

...

...


A MySQL client can establish an encrypted connection to a MySQL server. In standard configuration, a client connection is unencrypted, which can lead to data being intercepted on the way. The MySQL encryption can be done separately for each client connection, so both encrypted and unencrypted connections can be used simultaneously. It can also be configured as required for individual connections.

...

Add Java truststore to environment

Include truststore in your Datameer X environment to make sure that the JVM is using the correct store. To do so, edit etc/das-env.sh.

Code Block
languagebash
titleetc/das-env.sh
export JAVA_OPTIONS="$JAVA_OPTIONS -Djavax.net.ssl.trustStore=${JAVA_HOME}/jre/lib/security/cacerts -Djavax.net.ssl.trustStorePassword=changeit"

Modify the connection URL

Make the Datameer X service aware that the external MySQL service is using SSL. Edit the connection.url in persistence.xml and include useSSL=true

...