Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Certificate-based authentication for TiDB #1670

Closed
tennix opened this issue Feb 10, 2020 · 4 comments
Closed

Certificate-based authentication for TiDB #1670

tennix opened this issue Feb 10, 2020 · 4 comments
Assignees
@weekface
Labels
enhancement New feature or request priority:P1

Comments

@tennix
Copy link
Member

tennix commented Feb 10, 2020

Feature Request

TiDB support certificate-based authentication. This enhances the security for TiDB compared to password-based authentication. We should support this in tidb-operator for better security.
@tennix tennix added enhancement New feature or request priority:P1 labels Feb 10, 2020
@tirsen
Copy link
Contributor

tirsen commented Feb 13, 2020 •
edited
Loading

To be clear this includes configuring the CA chain set and configuring the cert/key that tidb presents to the mysql clients. Btw, this may be (and likely is) different from the ca/cert/key it uses for internal TLS.

@tennix
Copy link
Member Author

tennix commented Feb 14, 2020

Yes, I think once we support user-provided certificate to tidb SQL layer, we can have this feature.

@weekface weekface self-assigned this Feb 14, 2020
@tennix tennix mentioned this issue Feb 18, 2020
Merged
@tennix
Copy link
Member Author

tennix commented Mar 9, 2020

@weekface Is this already supported?

@weekface
Copy link
Contributor

weekface commented Mar 9, 2020

Yes, #1867 added certificate support for TiDB.

@tennix tennix closed this as completed Mar 9, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@weekface weekface

Labels
enhancement New feature or request priority:P1
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@weekface @tirsen @tennix