是否可以使用SSL将PHP PDO连接到远程MySQL但没有客户端证书

Question

If i understand this correctly remote MySQL server has server certificate to authenticate to a client and encrypt the connection. And client can have client certificate to authenticate to the server, but if i do not need to authenticate client to the server, because i only need encryption, can i omit client certificate when crating PDO connection.

And what is the syntax for that, for example $con = new PDO('mysql:host=someHost;dbname=someDB;port=3306',$user,$pass);
Where to specify that i want SSL but without client certificate

Answer 1

This is how i managed to conect with PDO

$conn = new PDO('mysql:host=myServer;dbname=MyDb',
                $user,
                $pass,
                array(PDO::MYSQL_ATTR_SSL_CA     => '/etc/ssl/certs/anyOneOfTheMilionCertsFromHere.pem',
                      PDO::MYSQL_ATTR_SSL_CAPATH => '/etc/ssl/certs/')
              );

I do not know whay but it does not work if i do not specify .pem file in "PDO::MYSQL_ATTR_SSL_CA", it can be any .pem file for example Deutsche_Telekom_Root_CA_2.pem, Baltimore_CyberTrust_Root.pem, ... it will work.

And this is how i managed to do it with the MYSQLI, just elegantly telling it that i whant SSL with constant "MYSQLI_CLIENT_SSL", without specifying some random friking .pem file

$mi = mysqli_init();
$conn = mysqli_real_connect($mi, $server, $user, $pass, $db, 3306, NULL, MYSQLI_CLIENT_SSL) or die(mysqli_connect_error());

Can this be done with PDO(like normaly) without explicitly specifying .pem file?