Verify that the MySQL/Galera cluster uses certificates¶

This section describes how to determine whether your MySQL/Galera cluster uses certificates and identify their location on the system.

To verify that the MySQL/Galera cluster uses certificates:

1. Log in to the Salt Master node.

2. Run the following command:

   salt -C 'I@galera:master' mysql.showglobal | grep -EB3 '(have_ssl|ssl_(key|ca|cert))$'
   

   Example of system response:

   Value:
       YES
   Variable_name:
       have_ssl
   
   Value:
       /etc/mysql/ssl/ca.pem
   Variable_name:
       ssl_ca
   
   Value:
       /etc/mysql/ssl/cert.pem
   Variable_name:
       ssl_cert
   
   Value:
       /etc/mysql/ssl/key.pem
   Variable_name:
       ssl_key
   

3. Proceed to renewal or replacement of your certificates as required.