MySql数据库开启SSL证书连接,客户端连数据库配置双向验证服务端证书和客户端证书

yd-api/src/main/resources/application-dev.properties

@@ -5,9 +5,20 @@ mybatis.mapper-locations=classpath:mapper/**/*.xml
 ######datasource######
 ###spring boot自动配置单数据源###
 spring.datasource.driver-class-name=com.mysql.jdbc.Driver
-spring.datasource.url=jdbc:mysql://139.224.139.2:13307/ajb?useUnicode=true&characterEncoding=utf8&useSSL=false&useAffectedRows=true&zeroDateTimeBehavior=convertToNull
-spring.datasource.username=devdbuser
-spring.datasource.password=devdbpass1
+##  服务端开启SSL，配置证书，客户端连服务端，配置双向验证服务端证书和客户端证书
+ssl.cert.path=/var/lib/mysql/ssl
+ssl.config=&allowMultiQueries=true&autoReconnect=true&clientCertificateKeyStoreUrl=file:${ssl.cert.path}/keystoreAJB.jks&clientCertificateKeyStorePassword=AJBMysqlSSL@Pass1&trustCertificateKeyStoreUrl=file:${ssl.cert.path}/truststoreAJB.jks&trustCertificateKeyStorePassword=AJBMysqlSSL@Pass1
+spring.datasource.url=jdbc:mysql://139.224.139.2:13307/ajb?useUnicode=true&characterEncoding=utf8&useAffectedRows=true&useSSL=true&requireSSL=true&verifyServerCertificate=true${ssl.config}
+
+## 服务端开启SSL，配置证书，客户端连服务端，直接信任证书，不用配置证书
+#spring.datasource.url=jdbc:mysql://139.224.139.2:13307/ajb?useUnicode=true&characterEncoding=utf8&useAffectedRows=true&useSSL=true&requireSSL=true&verifyServerCertificate=false
+spring.datasource.username=devdbuserSSL
+spring.datasource.password=devdbpass1SSL
+
+#服务端开启SSL之前的配置
+#spring.datasource.url=jdbc:mysql://139.224.139.2:13307/ajb?useUnicode=true&characterEncoding=utf8&useSSL=false&useAffectedRows=true
+#spring.datasource.username=devdbuser
+#spring.datasource.password=devdbpass1
 
 ##druid sql监控设置登录访问权限
 spring.datasource.druid.stat-view-servlet.login-username=yddruiduser
@@ -18,9 +29,20 @@ spring.datasource.druid.stat-view-servlet.enabled=false
 ###手动配置多数据源###
 #master
 multiple.datasource.master.driver-class-name=com.mysql.jdbc.Driver
-multiple.datasource.master.url=jdbc:mysql://139.224.139.2:13307/ajb?useUnicode=true&characterEncoding=utf8&useSSL=false&useAffectedRows=true&zeroDateTimeBehavior=convertToNull
-multiple.datasource.master.username=devdbuser
-multiple.datasource.master.password=devdbpass1
+##  服务端开启SSL，配置证书，客户端连服务端，配置双向验证服务端证书和客户端证书
+ssl.cert.master.path=/var/lib/mysql/ssl
+ssl.master.config=&allowMultiQueries=true&autoReconnect=true&clientCertificateKeyStoreUrl=file:${ssl.cert.master.path}/keystoreAJB.jks&clientCertificateKeyStorePassword=AJBMysqlSSL@Pass1&trustCertificateKeyStoreUrl=file:${ssl.cert.master.path}/truststoreAJB.jks&trustCertificateKeyStorePassword=AJBMysqlSSL@Pass1
+multiple.datasource.master.url=jdbc:mysql://139.224.139.2:13307/ajb?useUnicode=true&characterEncoding=utf8&useAffectedRows=true&useSSL=true&requireSSL=true&verifyServerCertificate=true${ssl.master.config}
+
+## 服务端开启SSL，配置证书，客户端连服务端，直接信任证书，不用配置证书
+#spring.datasource.url=jdbc:mysql://139.224.139.2:13307/ajb?useUnicode=true&characterEncoding=utf8&useAffectedRows=true&useSSL=true&requireSSL=true&verifyServerCertificate=false
+multiple.datasource.master.username=devdbuserSSL
+multiple.datasource.master.password=devdbpass1SSL
+
+#服务端开启SSL之前的配置
+#multiple.datasource.master.url=jdbc:mysql://139.224.139.2:13307/ajb?useUnicode=true&characterEncoding=utf8&useSSL=false&useAffectedRows=true
+#multiple.datasource.master.username=devdbuser
+#multiple.datasource.master.password=devdbpass1
 
 #egolden
 #multiple.datasource.egolden.driver-class-name=com.mysql.jdbc.Driver

yd-api/src/main/resources/application-local.properties

@@ -5,9 +5,21 @@ mybatis.mapper-locations=classpath:mapper/**/*.xml
 ######datasource######
 ###spring boot缺省配置单数据源###
 spring.datasource.driver-class-name=com.mysql.jdbc.Driver
-spring.datasource.url=jdbc:mysql://139.224.139.2:13307/ajb?useUnicode=true&characterEncoding=utf8&useSSL=false&useAffectedRows=true&zeroDateTimeBehavior=convertToNull
-spring.datasource.username=devdbuser
-spring.datasource.password=devdbpass1
+##  服务端开启SSL，配置证书，客户端连服务端，配置双向验证服务端证书和客户端证书
+#ssl.cert.path=D\:/ydProjectGit/yd-backend/yd-api/src/main/resources/mysqlSSL
+ssl.cert.path=classpath:mysqlSSL
+ssl.config=&allowMultiQueries=true&autoReconnect=true&clientCertificateKeyStoreUrl=file:${ssl.cert.path}/keystoreAJB.jks&clientCertificateKeyStorePassword=AJBMysqlSSL@Pass1&trustCertificateKeyStoreUrl=file:${ssl.cert.path}/truststoreAJB.jks&trustCertificateKeyStorePassword=AJBMysqlSSL@Pass1
+spring.datasource.url=jdbc:mysql://139.224.139.2:13307/ajb?useUnicode=true&characterEncoding=utf8&useAffectedRows=true&useSSL=true&requireSSL=true&verifyServerCertificate=true${ssl.config}
+
+## 服务端开启SSL，配置证书，客户端连服务端，直接信任证书，不用配置证书
+#spring.datasource.url=jdbc:mysql://139.224.139.2:13307/ajb?useUnicode=true&characterEncoding=utf8&useSSL=true&requireSSL=true&verifyServerCertificate=false
+spring.datasource.username=devdbuserSSL
+spring.datasource.password=devdbpass1SSL
+
+#服务端开启SSL之前的配置
+#spring.datasource.url=jdbc:mysql://139.224.139.2:13307/ajb?useUnicode=true&characterEncoding=utf8&useSSL=false&useAffectedRows=true
+#spring.datasource.username=devdbuser
+#spring.datasource.password=devdbpass1
 
 ##druid sql监控设置登录访问权限
 spring.datasource.druid.stat-view-servlet.login-username=yddruiduser
@@ -17,9 +29,21 @@ spring.datasource.druid.stat-view-servlet.enabled=false
 ###手动配置主数据源###
 #master
 multiple.datasource.master.driver-class-name=com.mysql.jdbc.Driver
-multiple.datasource.master.url=jdbc:mysql://139.224.139.2:13307/ajb?useUnicode=true&characterEncoding=utf8&useSSL=false&useAffectedRows=true&zeroDateTimeBehavior=convertToNull
-multiple.datasource.master.username=devdbuser
-multiple.datasource.master.password=devdbpass1
+##  服务端开启SSL，配置证书，客户端连服务端，配置双向验证服务端证书和客户端证书
+#ssl.cert.master.path=D\:/ydProjectGit/yd-backend/yd-api/src/main/resources/mysqlSSL
+ssl.cert.master.path=classpath:mysqlSSL
+ssl.master.config=&allowMultiQueries=true&autoReconnect=true&clientCertificateKeyStoreUrl=file:${ssl.cert.master.path}/keystoreAJB.jks&clientCertificateKeyStorePassword=AJBMysqlSSL@Pass1&trustCertificateKeyStoreUrl=file:${ssl.cert.master.path}/truststoreAJB.jks&trustCertificateKeyStorePassword=AJBMysqlSSL@Pass1
+multiple.datasource.master.url=jdbc:mysql://139.224.139.2:13307/ajb?useUnicode=true&characterEncoding=utf8&useAffectedRows=true&useSSL=true&requireSSL=true&verifyServerCertificate=true${ssl.master.config}
+
+## 服务端开启SSL，配置证书，客户端连服务端，直接信任证书，不用配置证书
+#multiple.datasource.master.url=jdbc:mysql://139.224.139.2:13307/ajb?useUnicode=true&characterEncoding=utf8&useSSL=true&requireSSL=true&verifyServerCertificate=false
+multiple.datasource.master.username=devdbuserSSL
+multiple.datasource.master.password=devdbpass1SSL
+
+#服务端开启SSL之前的配置
+#multiple.datasource.master.url=jdbc:mysql://139.224.139.2:13307/ajb?useUnicode=true&characterEncoding=utf8&useSSL=false&useAffectedRows=true&zeroDateTimeBehavior=convertToNull
+#multiple.datasource.master.username=devdbuser
+#multiple.datasource.master.password=devdbpass1
 
 #egolden
 #multiple.datasource.egolden.driver-class-name=com.mysql.jdbc.Driver