{"id":4892,"date":"2022-03-03T17:29:51","date_gmt":"2022-03-03T08:29:51","guid":{"rendered":"https:\/\/www.skyer9.pe.kr\/wordpress\/?p=4892"},"modified":"2022-04-05T17:14:46","modified_gmt":"2022-04-05T08:14:46","slug":"aws-rds-mariadb-%ec%83%9d%ec%84%b1-with-ssl","status":"publish","type":"post","link":"https:\/\/www.skyer9.pe.kr\/wordpress\/?p=4892","title":{"rendered":"AWS RDS MariaDB \uc0dd\uc131 with SSL"},"content":{"rendered":"<h1>AWS RDS MariaDB \uc0dd\uc131 with SSL<\/h1>\n<h2>AWS Console \uc811\uc18d<\/h2>\n<p><a href=\"https:\/\/ap-northeast-2.console.aws.amazon.com\/rds\/home?region=ap-northeast-2\">\uc5ec\uae30<\/a> \ub85c \uc811\uc18d\ud574\uc11c \ub370\uc774\ud0c0\ubca0\uc774\uc2a4 \uc0dd\uc131\uc744 \ud074\ub9ad\ud569\ub2c8\ub2e4.<\/p>\n<h2>\ub370\uc774\ud130\ubca0\uc774\uc2a4 \uc0dd\uc131<\/h2>\n<ul>\n<li>\n<p>\uc190\uc26c\uc6b4 \uc0dd\uc131 \uc120\ud0dd<\/p>\n<\/li>\n<li>\n<p>MariaDB \uc120\ud0dd<\/p>\n<\/li>\n<li>\n<p>\ud504\ub9ac \ud2f0\uc5b4 \uc120\ud0dd<\/p>\n<\/li>\n<li>\n<p>DB \uc778\uc2a4\ud134\uc2a4 \uc2dd\ubcc4\uc790 \uc5d0 \ub514\ube44\uba85\uc744 \uc785\ub825<\/p>\n<p>\uc720\uc77c\ud55c \uc774\ub984\uc774\uc5b4\uc57c \ud569\ub2c8\ub2e4.<br \/>\n\uc18c\ubb38\uc790\ub9cc \uc0ac\uc6a9\uac00\ub2a5\ud558\uba70, \ub744\uc5b4\uc4f0\uae30\ub294 \ubd88\uac00\ud569\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p>\ub9c8\uc2a4\ud130 \uc0ac\uc6a9\uc790 \uc774\ub984 \uc744 \uc785\ub825\ud569\ub2c8\ub2e4.(admin, root \ub4f1\uc740 \uc0ac\uc6a9\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.)<\/p>\n<\/li>\n<li>\n<p>\uc554\ud638 \uc790\ub3d9 \uc0dd\uc131 \uc120\ud0dd<\/p>\n<\/li>\n<li>\n<p>\ube44\ubc00\ubc88\ud638 \ubd84\uc2e4\uc2dc \uc544\ub798 \uba54\ub274\uc5d0\uc11c \ube44\ubc00\ubc88\ud638 \uc7ac\uc124\uc815 \uac00\ub2a5<\/p>\n<\/li>\n<\/ul>\n<p><img decoding=\"async\" src=\"https:\/\/www.skyer9.pe.kr\/wordpress\/wp-content\/uploads\/2022\/03\/2022-03-03-01.png\" alt=\"\" \/><\/p>\n<h2>\ubcf4\uc548 \uadf8\ub8f9<\/h2>\n<p>\ud544\uc694\ud55c \uacbd\uc6b0 inbound\/outbound \ubcf4\uc548\uadf8\ub8f9 \uc124\uc815 \uac00\ub2a5<\/p>\n<h2>MariaDB \uc5d0\uc11c \ub9c8\uc2a4\ud130 \uacc4\uc815\uc73c\ub85c \uc811\uc18d<\/h2>\n<p>\uc544\ub798\uc758 \uba54\ub274\uc5d0\uc11c \ud37c\ube14\ub9ad \uc811\uc18d\uc744 \ud5c8\uc6a9\ud560 \uc218 \uc788\uc9c0\ub9cc \uad8c\uc7a5\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\ud558\uc9c0\ub9cc \ud558\ub098\uc758 user \ub77c\ub3c4 \ud37c\ube14\ub9ad \uc561\uc138\uc2a4\uac00 \ud544\uc694\ud558\ub2e4\uba74 \ud37c\ube14\ub9ad \uc811\uc18d\uc744 \ud5c8\uc6a9\ud574\uc57c \ud569\ub2c8\ub2e4.<br \/>\n(\ud37c\ube14\ub9ad \uc561\uc138\uc2a4\uac00 \ud544\uc694\ud55c \ub370\uc774\ud0c0\ub294 RDS \uc790\uccb4\ub97c \ubd84\ub9ac\ud574\uc11c \ubcc4\ub3c4\ub85c \uc0dd\uc131\ud574\uc57c \ud569\ub2c8\ub2e4.)<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.skyer9.pe.kr\/wordpress\/wp-content\/uploads\/2022\/03\/2022-03-03-02.png\" alt=\"\" \/><\/p>\n<p>\uae30\uc874 EC2 \uc5d0\uc11c \uc811\uc18d\ud558\uac70\ub098, \uc2e0\uaddc EC2 \ub97c \uc0dd\uc131 \ud6c4 MariaDB \uc5d0 \uc811\uc18d\ud569\ub2c8\ub2e4.<\/p>\n<p>RDS \uc758 AZ \uc640 EC2 \uc758 AZ \ub294 \ub3d9\uc77c\ud574\uc57c \ud569\ub2c8\ub2e4.<\/p>\n<p>\uc544\ub798\uc758 \uba85\ub839\uc73c\ub85c MySQL Client \ub97c \uc124\uce58\ud569\ub2c8\ub2e4.<\/p>\n<pre><code class=\"language-bash\">sudo yum install mysql57<\/code><\/pre>\n<h2>\uc811\uc18d\uc6a9 \uacc4\uc815 \uc0dd\uc131<\/h2>\n<p>RDS \uc5d0 \uc811\uc18d\ud569\ub2c8\ub2e4.<\/p>\n<pre><code class=\"language-bash\">mysql -h &lt;RDS \uc5d4\ub4dc\ud3ec\uc778\ud2b8&gt; -u &lt;\ub9c8\uc2a4\ud130\uacc4\uc815 ID&gt; -p\nEnter password:&lt;\ub9c8\uc2a4\ud130\uacc4\uc815 \ube44\ubc00\ubc88\ud638&gt;<\/code><\/pre>\n<pre><code class=\"language-mysql\">mysql&gt; use mysql;\nmysql&gt; select host, user, authentication_string from user;\n\nmysql&gt; create user &#039;\uc544\uc774\ub514&#039;@&#039;%&#039; identified by &#039;\ube44\ubc00\ubc88\ud638&#039;;\n\nmysql&gt; create schema \ub514\ube44\uba85 default character set utf8;\n\nmysql&gt; GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, REFERENCES, INDEX, ALTER, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, CREATE VIEW, SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, EVENT, TRIGGER ON \ub514\ube44\uba85.* TO &#039;\uc544\uc774\ub514&#039;@&#039;%&#039; identified by &#039;\ube44\ubc00\ubc88\ud638&#039;;\n\nmysql&gt; flush privileges;<\/code><\/pre>\n<p>RDS \uc5d0\uc11c\ub294 \uc0ac\uc6a9\uc790 \ub9c8\uc2a4\ud130 \uacc4\uc815\uc774 \uc9c4\uc9dc \ub9c8\uc2a4\ud130 \uacc4\uc815\uc774 \uc544\ub2c8\ub77c,<br \/>\n\uc0c1\uc704\uc758 \ub610 \ub2e4\ub978 \ub9c8\uc2a4\ud130 \uacc4\uc815\uc774 \uc788\uc2b5\ub2c8\ub2e4.<br \/>\n\ub530\ub77c\uc11c <code>ALL privileges<\/code> \ub97c \uc0ac\uc6a9\ud560 \uc218\ub294 \uc5c6\uace0,<br \/>\n\uad8c\ud55c\uc744 \ub098\uc5f4\ud574 \uc8fc\uc5b4\uc57c \ud569\ub2c8\ub2e4.<\/p>\n<h2>SSL \uc5f0\uacb0 \ud65c\uc131\ud654<\/h2>\n<p>AWS RDS \ub294 \uae30\ubcf8\uc801\uc73c\ub85c SSL \uc124\uc815\uc774 \ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\ub610\ud55c \ub300\ubd80\ubd84\uc758 \ud074\ub77c\uc774\uc5b8\ud2b8\ub3c4 SSL \uc0ac\uc6a9(\uc0ac\uc6a9\ud560\uc218 \uc788\uc73c\uba74)\uc774 \uc124\uc815\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4.<br \/>\n\ub530\ub77c\uc11c \ubcc4\ub2e4\ub978 \uc124\uc815\uc5c6\uc774 SSL \uc5f0\uacb0\uc774 \uc774\ub8e8\uc5b4\uc9d1\ub2c8\ub2e4.<\/p>\n<p>SSL \uc5f0\uacb0\uc774 \ub418\uc5b4 \uc788\ub294\uc9c0 \ud655\uc778\ud558\uae30 \uc704\ud574\uc11c\ub294 \uc544\ub798 \uba85\ub839\uc744 \uc785\ub825\ud574 \ubd05\ub2c8\ub2e4.<br \/>\nSSL \uc5f0\uacb0\uc774 \uc544\ub2cc\uacbd\uc6b0 \uc544\ubb34 \ub0b4\uc6a9\ub3c4 \ucd9c\ub825\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.<\/p>\n<pre><code class=\"language-sql\">SHOW SESSION STATUS LIKE &#039;Ssl_cipher&#039;;<\/code><\/pre>\n<pre><code class=\"language-sql\">mysql&gt; SHOW SESSION STATUS LIKE &#039;Ssl_cipher&#039;;\n+---------------+-----------------------------+\n| Variable_name | Value                       |\n+---------------+-----------------------------+\n| Ssl_cipher    | ECDHE-RSA-AES128-GCM-SHA256 |\n+---------------+-----------------------------+\n1 row in set (0.00 sec)<\/code><\/pre>\n<pre><code class=\"language-sql\">mysql&gt; SHOW SESSION STATUS LIKE &#039;Ssl_cipher&#039;;\n+---------------+-------+\n| Variable_name | Value |\n+---------------+-------+\n| Ssl_cipher    |       |\n+---------------+-------+\n1 row in set (0.009 sec)<\/code><\/pre>\n<h2>No KST, Yes UTC<\/h2>\n<p>\uc11c\ubc84 \uc2dc\uac04\uc774 KST \uac00 \uc544\ub2c8\ub2e4.<\/p>\n<pre><code class=\"language-sql\">SELECT NOW();<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>AWS RDS MariaDB \uc0dd\uc131 with SSL AWS Console \uc811\uc18d \uc5ec\uae30 \ub85c \uc811\uc18d\ud574\uc11c \ub370\uc774\ud0c0\ubca0\uc774\uc2a4 \uc0dd\uc131\uc744 \ud074\ub9ad\ud569\ub2c8\ub2e4. \ub370\uc774\ud130\ubca0\uc774\uc2a4 \uc0dd\uc131 \uc190\uc26c\uc6b4 \uc0dd\uc131 \uc120\ud0dd MariaDB \uc120\ud0dd \ud504\ub9ac \ud2f0\uc5b4 \uc120\ud0dd DB \uc778\uc2a4\ud134\uc2a4 \uc2dd\ubcc4\uc790 \uc5d0 \ub514\ube44\uba85\uc744 \uc785\ub825 \uc720\uc77c\ud55c \uc774\ub984\uc774\uc5b4\uc57c \ud569\ub2c8\ub2e4. \uc18c\ubb38\uc790\ub9cc \uc0ac\uc6a9\uac00\ub2a5\ud558\uba70, \ub744\uc5b4\uc4f0\uae30\ub294 \ubd88\uac00\ud569\ub2c8\ub2e4. \ub9c8\uc2a4\ud130 \uc0ac\uc6a9\uc790 \uc774\ub984 \uc744 \uc785\ub825\ud569\ub2c8\ub2e4.(admin, root \ub4f1\uc740 \uc0ac\uc6a9\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.) \uc554\ud638 \uc790\ub3d9 \uc0dd\uc131 \uc120\ud0dd \ube44\ubc00\ubc88\ud638 \ubd84\uc2e4\uc2dc \uc544\ub798 \uba54\ub274\uc5d0\uc11c\u2026 <span class=\"read-more\"><a href=\"https:\/\/www.skyer9.pe.kr\/wordpress\/?p=4892\">Read More &raquo;<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-4892","post","type-post","status-publish","format-standard","hentry","category-aws"],"_links":{"self":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/4892","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4892"}],"version-history":[{"count":17,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/4892\/revisions"}],"predecessor-version":[{"id":5075,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/4892\/revisions\/5075"}],"wp:attachment":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4892"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4892"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4892"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}