TLS Modes

Provide the following certificates for each TLS mode:

  • CA Certificate: Certificate Authority (CA) certificate.
  • Client Certificate: Not required. Client Certificate file for connections requiring client authentication.
  • Client Key: Not required. Client key file used for connections requiring client authentication.

Note: You can override CA Certificate, Client Certificate, and Client Key by using an app property. For more information about overriding certificates, see "Overriding a Certificate Using the Environment Controls tab" topic in TIBCO Cloud™ Integration documentation.
Note: You can override CA Certificate, Client Certificate, and Client Key by using an app property. For more information about overriding certificates, see the "Environment Variables" topic in TIBCO Flogo® Enterprise User Guide.

For more details on TLS modes, see MySQL Documentation.

TLS Modes
TLS Modes Description
Required Client requires an encrypted connection and fails if one cannot be established.
Preferred If an attempt to connect to an encrypted connection fails, then the unencrypted connection is established.
VerifyCA Client requires an encrypted connection, and verifies with the server CA certificate.
  • Validate Server Certificate: Verifies CA certificate and the server host name to ensure it matches the Common Name in the server certificate.
VerifyIdentity Server host name is verified to ensure that it matches the host name stored in the server certificate.