Applicability
This topic applies only to OCP Enterprise Edition. OCP Community Edition does not support this feature.
Background information
System security is one of the key indicators for evaluating a database system. It refers to preventing unauthorized access to the database by using the database management system and protecting the database files and data. Data is the most important asset for enterprises and is often threatened from all sides. Data leaks have become more and more harmful and widespread. As the ultimate carrier of data, OceanBase Database pays close attention to data security and supports enterprise-level security features such as network transmission, user authentication, operation auditing, storage security, and high availability. To meet customer requirements for network transmission and data encryption, OceanBase Database supports SSL (Secure Sockets Layer) encryption for connections. By encrypting network connections at the transport layer, the security of communication data is improved.
Overview
Certificates are mainly used for SSL link encryption to ensure the security of communication links between the client and OBProxy, between OBProxy and the OceanBase cluster, and between OceanBase clusters. This includes SQL and RPC ports.
On the Certificates page of OCP, you can view the overview of uploaded certificates and perform daily maintenance operations on the certificates. This makes it convenient for you to quickly apply and manage certificates.
Examples
The process of using a certificate includes the following three steps:
Obtain the certificate.
Upload the certificate.
In OCP, upload a certificate to manage it centrally.
Use the certificate.
When you enable SSL link encryption for an OceanBase cluster or enable SSL link encryption for an OBProxy cluster, select the corresponding certificate to encrypt data transmission and the source of the data, ensuring data security.