I want to verify whether mysql remote connection is using tls/ssl connection for security purposes.
status command to check initially:
mysql> status -------------- mysql Ver 8.0.19 for osx10.15 on x86_64 (Homebrew) Connection id: 47 Current database: Current user: firstname.lastname@example.org SSL: Cipher in use is DHE-RSA-AES256-SHA Current pager: stdout Using outfile: '' Using delimiter: ; Server version: 5.5.5-10.3.27-MariaDB-0+deb10u1 Debian 10 Protocol version: 10 Connection: 31.224.603.2 via TCP/IP Server characterset: utf8mb4 Db characterset: utf8mb4 Client characterset: utf8mb4 Conn. characterset: utf8mb4 TCP port: 3306 Binary data as: Hexadecimal Uptime: 35 min 15 sec Threads: 9 Questions: 222 Slow queries: 0 Opens: 33 Flush tables: 1 Open tables: 27 Queries per second avg: 0.104 --------------
Here the ssl row has mentioned a cipher but according to some people this doesn't guarantee that the connection is actually ssl encrypted.
To be 100% sure, I installed wireshark but I have never used this software before. I just started capture with the destination set to the ip of db server. Can this be used to make sure the connection is ssl/tls encrypted? Any help is appreciated.