#28075 [Com]: mysql ssl connection
ID: 28075
Comment by: Bruno dot Harbulot at manchester dot ac dot uk
Reported By: petre dot rodan at avira dot com
Status: Assigned
Bug Type: Feature/Change Request
Operating System: linux
PHP Version: 4.3.6
Assigned To: georg
New Comment:
I have just tried this suggestion (using mysql_options to read the
[client] section of the global mysql configuration file). It works.
However, it doesn't seem like a good idea to use a global client
configuration for all the MySQL connections from PHP. There can be
scenarios where different certificates or CAs might be required.
Perhaps it would be better to have a binding of mysql_ssl_set (part of
the MySQL API) to the PHP MySQL extension. It seems that MySQLi supports
it.
See:
http://dev.mysql.com/doc/refman/5.0/en/mysql-ssl-set.html
http://www.php.net/manual/en/function.mysqli-ssl-set.php
Regards,
Bruno.
Previous Comments:
------------------------------------------------------------------------
[2004-04-20 15:54:40] derick@php.net
Assigning to georg, the maintainer of this extension.
------------------------------------------------------------------------
[2004-04-20 12:34:11] petre dot rodan at avira dot com
Description:
------------
I was tring to use SSL-enabled mysql connections using php and
mod_php.
The problem was that the libmysql library inside {,mod_}php detects
that SSL is needed, but it doesn't know the location of the client
certificate.
by simply inserting the following line
mysql_options(&mysql->conn,MYSQL_READ_DEFAULT_GROUP,"client");
before mysql_real_connect(..) in ext/mysql/php_mysql.c, the my.cnf file
is read and all SSL-related configurations are imported from there.
If my problem can be solved in another way, please drop me a line :).
Successfuly tested with php-4.3.4-r4, mod_php-4.3.4-r4,
mod_php-4.3.6-rc2, php-5.0_beta1-r1.
see
http://bugs.gentoo.org/show_bug.cgi?id=46340#c3
for scenario details
the patch can be downloaded here:
http://bugs.gentoo.org/attachment.cgi?id=28436&action=view
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=28075&edit=1
Thread (5 messages)