To use a specific cipher, perform the following steps. It uses the DHE-RSA-AES256-SHA cipher as an example.
- Open the
my.inifile using a text editor. - Add the following line next to ssl-key line in Client and mysqld sections, then restart the MySQL service.
ssl-cipher=DHE-RSA-AES256-SHA - By default, JRE 1.6 supports only 128-bit encryption. To use 256 bit, perform the following steps:
- Download the zip file from: http://www.oracle.com/technetwork/java/javase/downloads/jce-6-download-429243.html.
The zip file contains two jar files; local_policy.jar and US_export_policy.jar. - Rename or move the existing jar files and copy these files under
{JAVA_HOME}/jre/lib/securitydirectory. Make sure that these jar files are replaced if you are using a 256 bit encryption. For more information on properties, please refer to the agiliance.properties document.
- Download the zip file from: http://www.oracle.com/technetwork/java/javase/downloads/jce-6-download-429243.html.
- Run the following MySQL client command to connect to the Server:
mysql-u -p<database_password> --ssl-cipher=DHE-RSA-AES256-SHA
