chef/cookbooks/mysql/templates/default/ssl.cnf.erb
#
# Generated by Chef for <%= node[:hostname] %>
#
# Local modifications will be overwritten.
#
# The MySQL database server configuration file: SSL specific bits.
<% if node[:database][:mysql][:ssl][:enabled] %>
[mysqld]
ssl-cert = <%= node[:database][:mysql][:ssl][:certfile] %>
ssl-key = <%= node[:database][:mysql][:ssl][:keyfile] %>
<% unless (node[:database][:mysql][:ssl][:generate_certs] || node[:database][:mysql][:ssl][:insecure]) %>
ssl-ca = <%= node[:database][:mysql][:ssl][:ca_certs] %>
[client]
ssl-ca = <%= node[:database][:mysql][:ssl][:ca_certs] %>
<% end %>
<% end %>