Skip to content
This repository

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP

Easy SSL setup for MySQL

branch: master

Fetching latest commit…

Octocat-spinner-32-eaf2f5

Cannot retrieve the latest commit at this time

Octocat-spinner-32 COPYING
Octocat-spinner-32 README.md
Octocat-spinner-32 mysslgen.py
Octocat-spinner-32 requirements.txt
README.md

Description

This is a tool to help and configure MySQL for use with SSL

It will create a certificate authoritity in /etc/mysql/ssl and generate a keypair for the server and a keypair for the client.

It will generate the server and client options which must be added to your configuation.

Usage

usage: mysslgen.py [-h] [--config CONFFILE] [--ssldir SSLDIR]

Manage SSL Certificates for MySQL

optional arguments: -h, --help show this help message and exit --config CONFFILE --ssldir SSLDIR

You'll need to do a "chown -R mysql:mysql /etc/mysql/ssl" to make sure MySQL is able to read the key files.

Requirements

  • Python 3 (or Python >= 2.7)
  • pyOpenSSL (Ubuntu: python3-openssl)

Python version

It is made for Python 3.3, but it should be able to run on Python 2.7. You'll need to prepend python2.7 to the command (python2.7 ./mysslgen.py)

The ConfigParser module in Python 2.6 does not recognize the "allow_no_value" option, so Python 2.6 will not work for now.

RHEL6

Enable RedHat Software Collections, there you can find Python 2.7 and Python 3.3

CentOS6

Install the IUS repo: http://www.iuscommunity.org/pages/IUSClientUsageGuide.html Then:

yum install python33 python33-distribute gcc openssl-devel
easy_install-3.3 pyOpenSSL

License

This project is licensed under GPLv2

Something went wrong with that request. Please try again.