Thanks, Michael.
I used the absolute paths but it still does not work. I think the problem
is not because of the relative path because the example showed in the
manual also uses relative path (see below):
shell> *mysqld --ssl-ca=ca-cert.pem \*
*--ssl-cert=server-cert.pem \*
*--ssl-key=server-key.pem
*
For the permission, I used exactly the same as Reindl's (I used his
scripts).
Since the error messages are still the same, I guess there should be
something else wrong?
Best regards,
Jackie
On Sat, Nov 24, 2012 at 5:15 PM, Michael Dykman <[email protected]> wrote:
> I had noticed that the paths to your certificates were expressed as
> relative paths. I think at least part of Reindl's recommendation was to
> express fully qualified paths to your certs and to examined the permissions
> on those files carefully. SSL is very particular about rejecting security
> files which have too-permisive permissions..
>
> also, considered tailing /var/log/secure
>
> On 2012-11-24 8:05 PM, "Jackie Zhang" <[email protected]> wrote:
>
> Dear Reindl,
>
> Thanks a lot for the reply!
>
> I tried your scripts (the only difference is the openssl.cnf because I
> don't have it)
>
> Unfortunately, I still failed to start the server with the same message:
>
> 121124 17:00:06 [Warning] Failed to setup SSL
> 121124 17:00:06 [Warning] SSL error: Failed to set ciphers to use
>
> Do you have any idea from the log message?
>
> Best regards,
> Jackie
>
>
> On Sat, Nov 24, 2012 at 4:02 PM, Reindl Harald <[email protected]
> >wrote:
>
>
> >
> >
> > Am 25.11.2012 00:30, schrieb Jackie Zhang:
> > > Hello everyone,
> > >
> > > I want to setup SSL fo...
>
>
