Information
All network traffic must use SSL/TLS when traveling over untrusted networks.
Rationale:
Enabling SSL/TLS will allow clients to encrypt network traffic and verify the identity of the server. SSL/TLS helps to prevent eavesdropping and man-in-the-middle attacks.
Impact:
Enabling SSL/TLS could have impact on network traffic inspection.
Solution
Follow the procedures as documented in the MariaDB KnowledgeBase to setup TLS.
In your MariaDB configuration file, enable require_secure_transport:
require_secure_transport=ON;
Default Value:
require_secure_transport is disabled (OFF, 0) by default. have_ssl defaults to DISABLED.