In a comment on my post about Using SSL with MySQL xiaochong zhang asked if
it is possible to decode SSL/TLS encrypted MySQL traffic. The
short answer is: It depends.
To test this we need a MySQL server which is SSL enabled. I used
MySQL Sandbox to create a sandboxed 5.6.19 server. Then I used
mysslgen to create the config and the
certificates.
$ make_sandbox 5.6.19
$ ./mysslgen.py --config=sandboxes/msb_5_6_19/my.sandbox.cnf --ssldir=sandboxes/msb_5_6_19/ssl
This assumes there already is a extracted tarball of MySQL 5.6.19
in ~/mysql/5.6.19
The mysslgen.py script will return a message with the changes you
should make in your mysqld and client sections of the
my.sandbox.cnf file. Then restart the server to make …