cryptography - MySQL over SSL with self signed certificate -

i'm setting mysql server , trying have mysql client connect on ssl. i'm going using self signed certificate same. reading mysql documentation on setting ssl see have specify path following files :-

the ssl root ca ssl certificate ssl private key 

in particular case, should setting both root ca , certificate self signed certificate?

example of how create self-signed ssl certificate.

su root , create directory root account has access to.

su -  mkdir certificates  chmod 700 certificates  cd certificates 

use openssl generate server key

openssl genrsa -des3 -out server.key 4096 

openssl request pass phrase. type in sentence long , complex can remember (you'll have type @ least twice). try make @ least 40 characters long, punctuation , capital , lowercase letters. more different characters use better. create certificate signing request server key created in step 2.

openssl req -new -key server.key -out server.csr 

sign certificate using ssl.

openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt 

you can set certificate number of days, recommend 365 remember update once year.

once you're done, you'll have following files:

server.crt: self-signed server certificate server.csr: server certificate signing request server.key: private server key, not require password when starting apache 

place files required web server, , turn on https. (if don't know how, contact server administrator.)