title: Having problems enabling have_ssl mariadb
body: <p>I'm a bit of a unix newbie and am working with a MariaDB Enterprise server on a RHEL 7.2, and connecting to it via a RHEL 7.2 client. I used <a href="http://xmodulo.com/enable-ssl-mysql-server-client.html" rel="nofollow">this guide</a> to create all the certificates and keys I need for server and client alike, here's what my.cnf looks like:</p>
  
  <pre><code># Example mysql config file.
  # You can copy this to one of:
  # /etc/my.cnf to set global options,
  # /mysql-data-dir/my.cnf to get server specific options or
  # ~/my.cnf for user specific options.
  # 
  # One can use all long options that the program supports.
  # Run the program with --help to get a list of available options
  
  # This will be passed to all mysql clients
  [client]
  #password=my_password
  #port=3306
  #socket=/tmp/mysql.sock
  #datadir=/var/lib/mysql
  
  
  # Here is entries for some specific programs
  # The following values assume you have at least 32M ram
  
  # The MySQL server
  [mysqld]
  #port=3306
  #socket=/var/lib/mysql/mysql.sock
  
  temp-pool
  
  # The following three entries caused mysqld 10.0.1-MariaDB (and possibly other versions) to abort...
  # skip-locking
  # set-variable  = key_buffer=16M
  # set-variable  = thread_cache=4
  
  loose-innodb_data_file_path = ibdata1:1000M
  loose-mutex-deadlock-detector
  gdb
  
  ######### Fix the two following paths
  
  # Where you want to have your database
  data=/var/lib/mysql
  
  # Where you have your mysql/MariaDB source + sql/share/english
  #language=/path/to/src/dir/sql/share/english
  #language=/usr/local/mysql/share
  
  [mysqldump]
  quick
  set-variable = max_allowed_packet=16M
  
  [mysql]
  no-auto-rehash
  
  [myisamchk]
  set-variable= key_buffer=128M
  
  [mysqld]
  ssl-ca=/etc/mysql-ssl/ca-cert.pem
  ssl-cert=/etc/mysql-ssl/server-cert.pem
  ssl-key=/etc/mysql-ssl/server-key.pem
  bind-address=*
  socket=/var/lib/mysql/mysql.sock
  datadir=/var/lib/mysql
  user=mysql
  bind-address=*
  
  # Disabling symbolic-links is recommended to prevent assorted security risks
  symbolic-links=0
  # Settings user and group are ignored when systemd is used.
  # If you need to run mysqld under a different user or group,
  # customize your systemd unit file for mariadb according to the
  # instructions in http://fedoraproject.org/wiki/Systemd
  
  [mysqld_safe]
  log-error=/var/log/mariadb/mariadb.log
  pid-file=/var/run/mariadb/mariadb.pid
  
  #
  # include all files from the config directory
  #
  !includedir /etc/my.cnf.d
  </code></pre>
  
  <p>and I stopped the mysql service and started it like this:</p>
  
  <pre><code>service mysql start --ssl-ca=ca-cert.pem --ssl-cert=server-cert.pem --ssl-key=server-key.pem
  </code></pre>
  
  <p>But still, when I try to check if SSL is enabled I always see this:</p>
  
  <pre><code>MariaDB [(none)]&gt; SHOW GLOBAL VARIABLES LIKE 'have_%ssl';
  +---------------+----------+
  | Variable_name | Value    |
  +---------------+----------+
  | have_openssl  | YES      |
  | have_ssl      | DISABLED |
  +---------------+----------+
  </code></pre>
  
  <p>And the ssl-requiring user I created gets access denied. </p>
  
  <p>According to all the websites I looked up, it's supposed to be enough to just start the mysql service with these ssl details or just the ssl key but nothing works.</p>
  
  <p>What do I do?</p>