SUMMARY

The mysql_replication module should support setting MASTER_SSL_VERIFY_SERVER_CERT.

ISSUE TYPE

• Feature Idea

COMPONENT NAME

mysql_replication (changemaster)

ADDITIONAL INFORMATION

In an environment with a central CA as a trust anchor it certainly makes sense to verify the servers certificate. Otherwise a single compromised certificate+key would enable a MitM attack against the replication connection. Security minded people like to configure the replication connection in the most secure way possible.