SSL certificates are needed at a later stage. If not using the self-signed generated CA and certificates, ensure you have the following before starting:
-
A certificate authority (CA) SSL public certificate. If you are using a CA chain, all intermediate CAs must also be available.
-
An SSL database private key
-
An SSL database certificate All files must be in PEM format.
The hostname of the SSL server certificate must match the fully qualified hostname of the machine you deploy them on.
You can set the hostnames in the X509v3 Subject Alternative Name section of the certificate.
You can also list multiple hostnames if your environment requires it.
Supported Key types are RSA and EC (Elliptic Curve).
|
Database SSL certificate requires |