So mod_auth_mysql doesn't seem to call msql_ssl_set, so I assume there simply is no way to use it out of the box to connect to an ssl protected mysql server.
It looks like it would be fairly easy to add it in, but my first attempt failed. I tried mysql_ssl_set(&mysqlh, NULL, NULL, NULL, NULL, NULL) where &mysqlh held the object handed back by mysql_init.
I'm perfectly happy using the equivalent of mysql --ssl --ssl-ca=/dev/null, but I suppose it will take a little more digging to figure out what the appropriate calls are.
Any suggestions for making it shiny enough to submit back to the developers?
Thanks.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I have a remote mysql server that is protected by requiring ssl server.
I wish to use this server as my datastorage for authenticating apache users with mod_auth_mysql.
I have installed mod_auth_mysql.
I can connect to the mysql server via this style command line:
mysql --port=3306 --host=xxxx --ssl --ssl-ca=/dev/null -u yyyy -pzzzz -D radius
However I cannot see a place to configure mod_auth_mysql to use ssl. As my mysql client libraries support this, I would think that it could be done.
Anyone have any thoughts? Is it possible to do what I am looking for?
Thanks for your time.
So mod_auth_mysql doesn't seem to call msql_ssl_set, so I assume there simply is no way to use it out of the box to connect to an ssl protected mysql server.
It looks like it would be fairly easy to add it in, but my first attempt failed. I tried mysql_ssl_set(&mysqlh, NULL, NULL, NULL, NULL, NULL) where &mysqlh held the object handed back by mysql_init.
I'm perfectly happy using the equivalent of mysql --ssl --ssl-ca=/dev/null, but I suppose it will take a little more digging to figure out what the appropriate calls are.
Any suggestions for making it shiny enough to submit back to the developers?
Thanks.
No, we don't currently support ssl connections. However, it does sound like a good idea. Please post a request in the "feature requests" section.
Thanks.