Bug #89519 Documentation for SSL/TLS and replication is incomplete for 8.0
Submitted: 4 Feb 14:46 Modified: 12 Apr 8:04
Reporter: Daniël van Eeden (OCA) Email Updates:
Status: Closed Impact on me:
None 
Category:MySQL Server: Documentation Severity:S3 (Non-critical)
Version:8.0 OS:Any
Assigned to: CPU Architecture:Any
Tags: replication, SSL, tls

[4 Feb 14:46] Daniël van Eeden
Description:
Page: https://dev.mysql.com/doc/refman/8.0/en/change-master-to.html

"
option:
...
 | MASTER_SSL_VERIFY_SERVER_CERT = {0|1}
...
"

"The MASTER_SSL_xxx options provide information about using SSL for the connection. They correspond to the --ssl-xxx options described in Section 6.4.2, “Command Options for Encrypted Connections”, and Section 18.3.9, “Setting Up Replication to Use Encrypted Connections”."

On https://dev.mysql.com/doc/refman/8.0/en/encrypted-connection-options.html there is nothing describing --ssl-verify-server-cert

Closely related:
Bug #85950 	master_ssl_verify_server_cert must be deprecated and new option is required

How to repeat:
See description

Suggested fix:
Update docs and fix the related bug
[5 Feb 4:54] Umesh Shastry
Hello Daniël,

Thank you for the report and feedback!

Thanks,
Umesh
[14 Feb 8:41] Margaret Fisher
Posted by developer:
 
Thanks for the report. This was also raised as a doc bug by development recently and I have drafted some doc changes which are currently in review. The --ssl-verify-server-cert option was deprecated in 5.7 and removed in 8.0. The doc changes will explain the relationship of MASTER_SSL_VERIFY_SERVER_CERT to the --ssl- encrypted connection options. I'll let you know when it goes in.
[12 Apr 8:04] Margaret Fisher
Posted by developer:
 
Documentation changes now added at:
https://dev.mysql.com/doc/refman/8.0/en/change-master-to.html (now points to following topic for all SSL options)
https://dev.mysql.com/doc/refman/8.0/en/replication-solutions-encrypted-connections.html
Changes also made in equivalent 5.7 topics
Thanks again for the report!