How Do I Disable SSL for a Database?

Scenario

• If you audit your database without installing the agent, you do not need to disable SSL for the database. Skip this section.
• If you audit your database by installing an agent, you need to disable SSL for the database. Otherwise, you cannot obtain audit data.

Procedure

The MySQL database client is used as an example. Perform the following steps:

1. Log in to the MySQL database client as user root.
2. Run the following command to check the connection mode of the MySQL database:

   \s

   • If information similar to the following is displayed, SSL has been disabled for the MySQL database.

     1	SSL: Not in use

   • If information similar to the following is displayed, SSL has been enabled for the MySQL database. Go to 3.

     1	SSL: Cipher in use is XXX-XXX-XXXXXX-XXX

3. Log in to the MySQL database in SSL mode.
   1. Run the following command to exit from the MySQL database:

      exit

   2. Log in to the MySQL database as user root.

      Add the following parameters at the end of the login command:

      --ssl-mode=DISABLED

      Or

      --ssl=0

      

      If you logged in to the MySQL database in SSL mode, you can disable SSL only for this login. To use the database audit function, log in to the MySQL database as instructed in this step.

   3. Run the following command to check the connection mode of the MySQL database:

      \s

      If information similar to the following is displayed, SSL has been disabled for the MySQL database.

      1	SSL: Not in use