Verify that the MySQL/Galera cluster uses certificates

Verify that the MySQL/Galera cluster uses certificates

This section describes how to determine whether your MySQL/Galera cluster uses certificates and identify their location on the system.

To verify that the MySQL/Galera cluster uses certificates:

  1. Log in to the Salt Master node.

  2. Run the following command:

    salt -C 'I@galera:master' mysql.showglobal | grep -EB3 '(have_ssl|ssl_(key|ca|cert))$'
    

    Example of system response:

    Value:
        YES
    Variable_name:
        have_ssl
    
    Value:
        /etc/mysql/ssl/ca.pem
    Variable_name:
        ssl_ca
    
    Value:
        /etc/mysql/ssl/cert.pem
    Variable_name:
        ssl_cert
    
    Value:
        /etc/mysql/ssl/key.pem
    Variable_name:
        ssl_key
    
  3. Proceed to renewal or replacement of your certificates as required.