Support TLS and online reload with new certs

[DanielZhangQD]

Description

Support TLS and online reload new certs.

Category

• Security

Task list

• Enable TLS for PD client and TiKV Client support TLS in cdc components #347
• Enable TLS for HTTP client support TLS in cdc components #347
• Enable TLS for MySQL sink *: support ssl mysql sink #742
• Enable TLS for Kafka sink cdc/sink: support Kafka SSL connection #764
• Sppport reloading certs online. support TLS in cdc components #347
• Validate Common Name *: support verify client cert common name #747

Value

Value Description

• Improves security.
• Allow TiCDC to be used in public could platform.

Value Score

Optional value: 1~5

• 4

Workload Estimation

1 Point for 1 Person/Work Day

• 5 Points

[DanielZhangQD]

Usually, there will be an expiration of the TLS certificates, we also have to support online reload with new certificates instead of just restart the process.
Suggest all the PingCAP components and tools to implement the cert reload feature in the same way.

[overvenus]

TLS and SSL security features have been implemented, closed.