Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Mysql ssl connections unterstützen #2196

Closed
staabm opened this issue Nov 9, 2018 · 2 comments · Fixed by #3311
Closed

Mysql ssl connections unterstützen #2196

staabm opened this issue Nov 9, 2018 · 2 comments · Fixed by #3311
Labels
Core REDAXO Core related things Feature Additional functionality Security
Milestone

Comments

@staabm
Copy link
Member

staabm commented Nov 9, 2018

Feature description / Feature Beschreibung
im Setup sollte es eine checkbox geben, ob man die mysql datenbank via ssl connecten möchte

http://php.net/manual/en/mysqli.ssl-set.php

siehe z.b. im phpmyadmin

https://github.com/phpmyadmin/phpmyadmin/blob/cf8e559987065da8ed34afa29f246a3ae89c8996/libraries/classes/Dbi/DbiMysqli.php#L75-L103

zusätzlich könne man auch einen hinweis/warning/empfehlung im setup haben, wenn die mysql connection ohne ssl genutzt wird (sind vermutlich aktuell ein großteil/fast alle redaxo installationen)

@staabm staabm added Feature Additional functionality Security Core REDAXO Core related things labels Nov 9, 2018
@gharlan
Copy link
Member

gharlan commented Mar 9, 2019

Wobei wir mit PDO arbeiten, nicht mysqli, aber da gibt es sicherlich äquivalente Möglichkeiten.

@staabm staabm added this to the REDAXO 5.8 milestone Mar 21, 2019
@staabm staabm modified the milestones: REDAXO 5.8, REDAXO 5.9 May 5, 2019
@alxndr-w
Copy link
Contributor

Hier kurz recherchiert:
https://www.php.net/manual/de/ref.pdo-mysql.php#103501

<?php
$pdo = new PDO(
    'mysql:host=hostname;dbname=ssldb',
    'username',
    'password',
    array(
        PDO::MYSQL_ATTR_SSL_KEY    =>'/path/to/client-key.pem',
        PDO::MYSQL_ATTR_SSL_CERT=>'/path/to/client-cert.pem',
        PDO::MYSQL_ATTR_SSL_CA    =>'/path/to/ca-cert.pem'
    )
);
?>

imho müssten die Pfade in der config.yml an den Datenbank-Credentials gesetzt werden können (pro Datenbankverbindung)

@gharlan gharlan removed this from the REDAXO 5.9 milestone Jan 22, 2020
@staabm staabm added this to the REDAXO 5.10 milestone Feb 21, 2020
@kodiakhq kodiakhq bot closed this as completed in #3311 Feb 22, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Core REDAXO Core related things Feature Additional functionality Security
Development

Successfully merging a pull request may close this issue.

3 participants