Data-in-Transit Encryption

Secure MariaDB Server data in transit with encryption. This section covers configuring SSL/TLS to protect communication between clients and the database, ensuring confidentiality and integrity.

Protect your data as it moves across the network with Data-in-Transit Encryption. By leveraging the TLS (Transport Layer Security) protocol, MariaDB ensures that credentials, queries, and result sets are encrypted between the client and server. This prevents "man-in-the-middle" attacks and unauthorized eavesdropping on sensitive information.

This guide covers the essentials of securing your network traffic—from configuring SSL certificates and private keys to enforcing secure connections for all users. Secure your communications layer to maintain data integrity and confidentiality in any environment.

Secure Connections Overview

Conceptual overview of data-in-transit encryption in MariaDB, discussing supported TLS libraries (OpenSSL, wolfSSL), protocol versions (tls_version), and certificate verification.

Securing Connections for Client and Server

Complete MariaDB security guide. Complete resource for user management, access control, SSL/TLS encryption, and audit policies with comprehensive examples.

Replication with Secure Connections

A guide to securing replication traffic between primary and replica servers, covering the use of CHANGE MASTER TO options (e.g., MASTER_SSL) and mutual authentication.

Enabling TLS on MariaDB Server

Step-by-step instructions for configuring MariaDB Server to use TLS by setting system variables like ssl_cert, ssl_key, and ssl_ca in the configuration file.

Certificate Creation with OpenSSL

Complete OpenSSL TLS certificate guide: generate CA key/cert and server key/CSR, sign X509 with openssl x509 -CA/-CAkey, and verify certificates.

SSL/TLS System Variables

Reference list of system variables related to TLS configuration, such as ssl_cipher, ssl_crl, and have_ssl, used to manage and monitor encryption settings.

Using TLSv1.3