Stuck on an issue?
Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.
And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.
MySQL SSL
See original GitHub issueIt would be awesome if we can tell GRR to connect to the specified MySQL instance using TLS. Something like mysql’s --ssl-ca, --ssl-cert, --ssl-key options.
Issue Analytics
- State:
- Created 5 years ago
- Reactions:1
- Comments:7 (4 by maintainers)
Top Results From Across the Web
6.3 Using Encrypted Connections - MySQL :: Developer Zone
MySQL supports encrypted connections between clients and the server using the TLS (Transport Layer Security) protocol. TLS is sometimes referred to as SSL...
Read more >How to Configure MySQL SSL Connections
Create the directory to store the SSL keys · Create the SSL keys · Edit the MySQL configuration · Test the SSL configuration...
Read more >How to connect to a remote MySQL server using SSL on Ubuntu
Now that we have enabled SSL, the next step in the configuration of MySQL is to enable (allow) remote connection. By default, MySQL...
Read more >Securing MySQL Databases with SSL/TLS. - Teleport
By default, MySQL is configured to only allow connections from the local system. If you want to connect to a MySQL server from...
Read more >How To Secure MySQL 8 with SSL/TLS on Ubuntu 20.04
By default, MySQL is configured to only allow connections from the local system. If you want to connect to a MySQL server from...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Just to give an update here, we are going to add this soon. I have a first draft already implemented.
I didn’t do any measurements with GRR specifically. I just found some DBA articles showing some testing comparisons between no encryption, ssh tunnels, ssl tunnels, and native ssl a few years ago. In the past I have used autossh to set up the tunnels so the host running GRR sets up a tunnel to the mysql host and then you configure GRR to connect to localhost:3306 which gets sent through the tunnel to the mysql host.
I haven’t dug into the library to know if the problem that makes that interface difficult isn’t deeper in another library so I’m not sure how difficult it would be to change.