amazon-web-services - 使用客户端应用程序更新非 SSL 中的 Amazon RDS SSL/TLS 证书

Question

最近我收到一条来自亚马逊的消息/通知

Update your Amazon RDS SSL/TLS certificates before March 5, 2020

To avoid interruption of your applications using RDS and Aurora databases, update the Certificate Authority (CA) certificates for these databases before March 5, 2020. We strongly recommend making your updates before February 5, 2020, to leave time for deployments, testing, and validation. New databases created after January 14, 2020, will default to using the new CA certificates. Make sure that you update your client applications with the new certificates first. Find the new CA certificates and info: RDS Aurora.

我们在 RDS 中有几个数据库实例，我们通过我们的客户端/php 应用程序连接它们，没有 SSL。那么，这是我的问题，我们还需要更新 amazon RDS SSL/TLS 证书吗？如果这样做，我们是否仍需要更新我们的客户端应用程序以使用 SSL？

Answer 1

we connect them via our client/php application without SSL

so, here is my question, do we still need to update amazon RDS SSL/TLS certificate ?

不，您不需要更新 RDS 实例上的 SSL/TLS 证书，尽管亚马逊最终会自动为您完成。

If we do so, do we still need to update our client application to use SSL ?

没有。如果您不必在客户端应用程序中安装以前的 SSL 证书，那么为什么需要在客户端应用程序中安装新版本？