Re: [cobalt-users] MySQL 4 with SSL

[René Mølsted <molsted@xxxxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----

- -----BEGIN PGP SIGNED MESSAGE-----

Just got an update:
It's only used to sync 2 databases between server1 (ours) and server2
(clients db) via internet, does this change anything?



On torsdag, maj 15, 2003, at 10:36 Europe/Copenhagen, Ian wrote:

> On 14 May 2003 at 17:54, René Mølsted wrote:
>
> <snip>
>
>>> Can I ask - how are you intending to use this ssl connection ?
>>> Is it for a  web site on the same server?  Another client on the
>>> network ? Another client on the internet ?
>
>> It is intented for all three connections ;o)
>
> There is not much you can do about connections from the server, apart
> from encrypting data yourself.  For websites with sensetive data, I
> use gnupgp.
>
>
>>> The reason I ask - I have seen nothing but problems with getting
>>> mysql-ssl working,   I ended up just using a secure tunnel - took
>>> about five minutes to set up.
>
>> How does secure tunnel works?
>
> I use stunnel ( http://www.stunnel.org ).
>
> It works in two modes: client and server.
>
> Basically the server listens on a port you specify ( eg 3007 ) for
> any SSL connections and passes them on unencrypted to another local
> port you specify (in this case the MySQL port 3306 ).
>
> The client listens on a local port ( eg 3006) for any unencrypted
> connections, then creates a SSL connection to the server port (3007).
>
>
> Stunnel is available as source code for Linux and as a precompiled
> binary for windows.  The latest version even runs as a service under
> win2k.
>
> You don't just have to use it for MySQL, it can provide secure access
> to any service.
>
>
> Regards
>
> Ian
> --
>
>
>
>
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users

- -----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.2

iQCVAwUBPsNUKRP8J6DAN1ixAQEArQP/Y+p4iR2b69Bsyd6FqHnVrKskQzklbc8u
MVjIgaahfssySWzfGS8cjx45/M+XPgId2TdOMUNxW64Ggargl1L+G6opIbmSQ4OS
WbcO+MjhIJ0BSU3gwVbqtEJjHBUhxIjQULpQufpk2SChTsL2FG77VMUIMBahUuig
NVPcFtm6c/w=
=ZWd+
- -----END PGP SIGNATURE-----


-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.2

iQCVAwUBPsNURhP8J6DAN1ixAQEZXwP/R+bWnRgxW56FlSvrk0p1YlxJJreE+3GV
dsgRSwIBivlH+Swv/VoKNwM6MYSCg606lw4D9Z89rfyiL+4LRRe/Qu5eXhtd29BZ
m3SH19gDWVa6WyYYyesS9oMHRmcQT6z8Y0FNfhhkk9uW0jV7F5x1mpXyEa85BT4h
8XSuPHHwONQ=
=+INN
-----END PGP SIGNATURE-----