Applicability
This topic applies only to OCP Enterprise Edition. OCP Community Edition does not provide this feature.
Background information
System security is one of the important indicators for measuring a database system. It refers to the ability of a database management system to prevent unauthorized use of the database and protect its files and data. Data is the most important asset of an enterprise and often faces threats from various aspects. The harm and scope of data breaches are becoming increasingly severe and widespread. As the ultimate carrier of data, OceanBase Database places great emphasis on protecting data security and already supports enterprise-level security features in multiple areas, including network transmission, user authentication, operation auditing, storage security, and high availability. To meet customer demands for network transmission and data encryption, OceanBase Database connections support enabling SSL (Secure Sockets Layer) encryption. By encrypting network connections at the transport layer, it enhances the security of communication data.
Feature introduction
Certificates are primarily used for SSL link encryption to ensure the security of communication links between the client and OBProxy, OBProxy and the OceanBase cluster, and between OceanBase clusters, including SQL and RPC ports.
On the Certificate Management page of OCP, you can view the overview of uploaded certificates and perform routine maintenance on them, facilitating quick application and management of certificates.
Usage example
The process for using a certificate consists of the following three steps:
Obtain a certificate.
Upload the certificate.
In OCP, upload a certificate to manage certificates centrally.
Use the certificate.
When enabling SSL link encryption for an OceanBase cluster or enabling SSL link encryption for an OBProxy cluster, select the corresponding certificate to achieve data transmission encryption and source encryption, ensuring data security.