使用带有SSL的远程连接时出现MySQL错误

Question

我在一台主机上安装了一台mysql服务器，我希望通过加密连接从另一台主机连接到mysql服务器（两者都运行Ubuntu12.04)。我已经创建并传输了证书，并手动测试了设置。我可以从Linux命令行使用密钥和证书连接到远程mysql服务器，因此服务器配置似乎是正确的：

$ mysql -h x.x.x.x -u user01 -p --ssl-ca=ca.pem --ssl-cert=cert.pem --ssl-key=key.pem

 mysql> show status like 'Ssl_cipher';
 +---------------+--------------------+
 | Variable_name | Value              |
 +---------------+--------------------+
 | Ssl_cipher    | DHE-RSA-AES256-SHA |
 +---------------+--------------------+
 1 row in set (0.00 sec)

$obj = mysqli_init();
mysqli_options($obj, MYSQLI_OPT_CONNECT_TIMEOUT, 5);
mysqli_ssl_set($obj, "/etc/mysql/key.pem", "/etc/mysql/cert.pem", "/etc/mysql/ca.pem", null, null);
mysqli_real_connect($obj, NODE_IP, NODE_USER, NODE_PASSWORD, NODE_DATABASE);

PHP Warning:  mysqli_real_connect(): SSL operation failed with code 1. OpenSSL Error messages:
error:14082174:SSL routines:SSL3_CHECK_CERT_AND_ALGORITHM:dh key too small in /var/www/internal/test.php on line 11

PHP Warning:  mysqli_real_connect(): SSL operation failed with code 1. OpenSSL Error messages:
error:140830B5:SSL routines:SSL3_CLIENT_HELLO:no ciphers available in /var/www/internal/test.php on line 11

我不知道怎么了，有什么想法吗？谢了！

Answer 1

我可以通过在mysqli_ssl_set()的密码规范中使用“aes256-sha”来解决Diffie-Hellman密钥长度问题。

谢了！