Details
-
New Feature
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Fixed
-
None
-
None
Description
For TLS, actual implementation either use the default truststore or using the server certificate provided by option `serverSslCert`.
MySQL permit another option, to use another truststore. This is done using options `trustCertificateKeyStoreUrl`/`trustCertificateKeyStorePassword`.
For compatibility, this has to be added.
This can just be use using option:
"jdbc:mariadb://host/db?trustCertificateKeyStoreUrl=/path/to/trustStore"
default truststore /lib/security/jssecacerts will then not be used, only the one in parameter.
Option trustCertificateKeyStorePassword can be set for jks truststore that can have a password.