继Azure Documentation for their New MySQL service之后,您可以使用其可信CA证书轻松设置SSL.
按照他们的步骤并根据他们的文档设置我的PHP连接字符串后,我收到以下错误：
对等证书CN =`AZUREREGION.control.database.windows.net’与testazure.php中的预期CN =`MYDATABASE.mysql.database.azure.com’不匹配
通过将我的连接字符串的主机名从MYDATABASE.mysql.database.azure.com更改为AZUREREGION.control.database.windows.net,我能够“解决”这个问题,但我觉得这可能不是我应该做的.任何更了解Azure数据库for MySQL或PHP的SSL连接的人的指导都会有所帮助！
—–更新—–
我以前接受过Jason的回复.他的答案是不够的.如果您按照我上面的错误做的那样做,那么当MSFT决定更改数据库的基础DNS解析时,最终会遇到中断.
I ended up suffering an outage today because of this answer. I think
you may need to answer my question more thoroughly. As I mentioned in
my question, I felt like something was off by changing the “host” path
to the region. About 20 minutes ago, your internal DNS service changed
the underlying region record for “MYDATABASE.mysql.database.azure.com”
to “cr2.MYREGION.control.database.windows.net” instead of
“MYREGION.control.database.windows.net” without any warning. As such,
I’m removing the accepted answer.
解决方法:
你的解决方案实际上是正确的.在我们启动服务时,我们更改了服务的DNS以更准确地反映您的服务器,但是我们需要根据需要更新文档.
感谢您的举报 – 我们会更新文档！
贾森
Azure DB for MySQL团队