Documentation Home
Security in MySQL
Related Documentation Download this Excerpt
PDF (US Ltr) - 1.0Mb
PDF (A4) - 1.0Mb
HTML Download (TGZ) - 228.8Kb
HTML Download (Zip) - 237.6Kb

Security in MySQL  /  Using Encrypted Connections  /  OpenSSL Versus yaSSL

6.4 OpenSSL Versus yaSSL

MySQL can be compiled using OpenSSL or yaSSL, both of which enable encrypted connections based on the OpenSSL API:

  • MySQL Enterprise Edition binary distributions are compiled using OpenSSL. It is not possible to use yaSSL with MySQL Enterprise Edition.

  • MySQL Community Edition binary distributions are compiled using yaSSL.

  • MySQL Community Edition source distributions can be compiled using either OpenSSL or yaSSL (see Section 6.5, “Building MySQL with Support for Encrypted Connections”).

OpenSSL and yaSSL offer the same basic functionality, but MySQL distributions compiled using OpenSSL have additional features:

Certain OpenSSL-related system and status variables are present only if MySQL was compiled using OpenSSL:

To determine whether a server was compiled using OpenSSL, test the existence of any of those variables. For example, this statement returns a row if OpenSSL was used and an empty result if yaSSL was used:

SHOW STATUS LIKE 'Rsa_public_key';

Such tests assume that your server version is not older than the first appearance of the variable tested. For example, you cannot test for Rsa_public_key before MySQL 5.6.6, when that variable was added.

User Comments
  Posted by Jacob Barthelmeh on June 16, 2016
As a note on the comparison of yaSSL and OpenSSL in MYSQL there is an alpha version on wolfSSL's github transitioning from yaSSL to wolfSSL at yaSSL's compatibility layer for OpenSSL API's is limited in comparison to the embedded TLS/SSL wolfSSL library.
Sign Up Login You must be logged in to post a comment.