Fixed: MySQL: You are enforcing ssl conection via unix socket. Please consider switching ssl off as it does not make connection via unix socket any more secure.
A user connecting with unix socket files is necessarily coming from localhost.
A user connecting with TCP could be from either localhost or from some other host.
So, create one user@otherHost (or at %, or whatever) with REQUIRE SSL, and create another user@localhost which does not REQUIRE SSL.
It's not perfect, because a user could connect over TCP without SSL, but only on localhost, so it's probably not that big a concern.
A user connecting with TCP could be from either localhost or from some other host.
So, create one user@otherHost (or at %, or whatever) with REQUIRE SSL, and create another user@localhost which does not REQUIRE SSL.
It's not perfect, because a user could connect over TCP without SSL, but only on localhost, so it's probably not that big a concern.
Comments
Post a Comment