amazon-web-services - 使用客户端应用程序在非SSL中更新Amazon RDS SSL / TLS证书(Update Amazon RDS SSL/TLS certificates in non ssl using client application)

Question

Recently I got a message/notification from Amazon (最近，我收到了来自亚马逊的消息/通知)

Update your Amazon RDS SSL/TLS certificates before March 5, 2020 (在2020年3月5日之前更新您的Amazon RDS SSL / TLS证书)

To avoid interruption of your applications using RDS and Aurora databases, update the Certificate Authority (CA) certificates for these databases before March 5, 2020. We strongly recommend making your updates before February 5, 2020, to leave time for deployments, testing, and validation. (为避免使用RDS和Aurora数据库中断应用程序，请在2020年3月5日之前更新这些数据库的证书颁发机构（CA）证书。我们强烈建议在2020年2月5日之前进行更新，以留出时间进行部署，测试和验证。) New databases created after January 14, 2020, will default to using the new CA certificates. (2020年1月14日之后创建的新数据库将默认使用新的CA证书。) Make sure that you update your client applications with the new certificates first. (确保首先使用新证书更新客户端应用程序。) Find the new CA certificates and info: RDS Aurora. (查找新的CA证书和信息：RDS Aurora。)

We have few DB instances in RDS & we connect them via our client/php application without SSL. (RDS中的数据库实例很少，我们通过不带SSL的客户端/ php应用程序连接它们。) So, here is my question, do we still need to update amazon RDS SSL/TLS certificate ? (所以，这是我的问题，我们仍然需要更新Amazon RDS SSL / TLS证书吗？) If we do so, do we still need to update our client application to use SSL ? (如果这样做，是否仍需要更新客户端应用程序以使用SSL？)

  ask by Rockers Niloy translate from so

Answer 1

we connect them via our client/php application without SSL (我们通过没有SSL的客户端/ php应用程序连接它们)

so, here is my question, do we still need to update amazon RDS SSL/TLS certificate ? (所以，这是我的问题，我们仍然需要更新Amazon RDS SSL / TLS证书吗？)

No you don't need to update the SSL/TLS certificate on your RDS instance, although Amazon will do it for you automatically eventually. (不，您不需要在RDS实例上更新SSL / TLS证书，尽管Amazon最终会自动为您这样做。)

If we do so, do we still need to update our client application to use SSL ? (如果这样做，是否仍需要更新客户端应用程序以使用SSL？)

No. If you didn't have to install the previous SSL certificate in your client application, then why would you need to install the new version in your client application? (不需要。如果您不必在客户端应用程序中安装以前的SSL证书，那么为什么需要在客户端应用程序中安装新版本？)