SSL Replication question

MySQL & MariaDB Percona Distribution for MySQL
1

I have replication setup. Copied keys, certs from the source to the replica.

The ssl keys/certs are specified in the mysql config file.

source_ssl is 1

My replication user is setup and requires ssl.

Replication is working and syncing.

Is this setup complete?

I see on the mysql documentation that i need to also put the ca , server , and key certs. I did not set those up.

Do I need to set those up or the fact that my replication user uses ssl is good enough?

Thanks

2

Your setup is completed for encrypted replication.

If you wanted stronger production security, configure at least:

STOP REPLICA;

CHANGE REPLICATION SOURCE TO
    SOURCE_SSL = 1,
    SOURCE_SSL_CA = '/path/to/ca.pem';

START REPLICA;

You normally do not need to configure the replica with the source server’s certificate and private key. The source keeps its own server-cert.pem and server-key.pem; the replica only needs the trusted CA unless mutual certificate authentication is required.

replication-encrypted-connections