如何为所有远程用户要求 SSL

沃梦达教程数据库问题

2022-01-01

How to require SSL for all remote users(如何为所有远程用户要求 SSL)

本文介绍了如何为所有远程用户要求 SSL的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！

问题描述

给定一个有多个远程用户的 MySQL 系统(形式为 'joecool'@'192.168.1.2' 的用户)；是否有 SQL 语句可以用于为所有远程用户REQUIRE SSL?


Given a MySQL system with multiple remote users (users of the form 'joecool'@'192.168.1.2'); is there a SQL statement I can use to REQUIRE SSL for all the remote users?
单用户命令是:
GRANT USAGE ON *.* TO 'joecool'@'192.168.1.2' REQUIRE SSL;

拥有所有用户"版本会特别有用，因为 phpMyAdmin 不支持 REQUIRE SSL 标志创建或修改用户时.
Having an "all user" version would be especially useful because phpMyAdmin doesn't support the REQUIRE SSL flag when creating or modifying users.
推荐答案

Honza(以前)接受的答案似乎不正确，请参阅其评论.自 GRANT 查询同时更改多个用户grant-accounts-passwords" rel="noreferrer">MySQL 不支持用户名的通配符.

The (formerly) accepted answer by Honza seems incorrect, see its comments. It seems not possible to use a GRANT query to alter multiple users at once since MySQL does not support wildcards for user names.

正如您自己建议的那样，您可以使用 UPDATE 查询直接更改 mysql.user 表中的记录，并按照 Marc Delisle 的建议，然后使用以下方法刷新特权:

As you suggested yourself you can alter records in the mysql.user table directly using an UPDATE query and as Marc Delisle suggested, afterwards flush priviliges with: