Will someone educate me why you should connect your DB using SSL?<div>(assuming that you are on the same network, and not communicating across the internet, of course)</div><div><br></div><div>Shmuel.<br><br><div class="gmail_quote">
On Tue, Jan 24, 2012 at 11:27 PM, Felix Liberman <span dir="ltr"><<a href="mailto:felix.liberman@gmail.com">felix.liberman@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Hi All,<div><br></div><div>I'm trying to re-configure my Perl application that communicates with MySQL server via DBI layer.</div><div>Previous version worked perfectly without SSL, but now (for production mode) higher security measures required, so I switched to SSL.</div>
<div>I run MySQL server with SSL support and even managed to connect via command-line interface (using standard mysql utility):</div><div><br></div><div>{{{</div><div><div>mysql> status</div><div>--------------</div><div>
/{somepath}/bin/mysql Ver 14.14 Distrib 5.5.20, for Linux (x86_64) using EditLine wrapper</div><div><div><br></div><div>Connection id: 34</div><div>Current database: sc_prj_cm</div><div>Current user: {someuser}@{somehost}</div>
<div>SSL: Cipher in use is DHE-RSA-AES256-SHA</div><div>Current pager: less</div><div>Using outfile: ''</div><div>Using delimiter: ;</div><div>Server version: 5.5.20-log Source distribution</div>
<div>Protocol version: 10</div><div>Connection: {somehost} via TCP/IP</div></div></div><div>}}}</div><div><br></div><div>The DBD::mysql (rev 4.018) module was compiled with SSL enabled option, but client application fails:</div>
<div><br></div><div>{{{</div><div>DBI connect('database=sc_prj_cm;host={somehost};port=3306;mysql_ssl=1;mysql_ssl_ca_file=/{somepath}/ssl_certs/cacert.pem','{someuser}',...) failed: SSL connection error at {my source code}</div>
<div>}}}<br clear="all"><div><br></div><div>Both connections (mysql command-line and Perl app) used the same certificates on the same host.</div><div><br></div><div>Googling around the keywords did not bring much info. </div>
<div><br></div><div>Maybe the local community can help me?</div><div><br></div><div><br></div><div>Thanks in advance,</div><span class="HOEnZb"><font color="#888888"><div>-- </div><div dir="ltr"><a href="http://felixl.coolpage.biz" target="_blank">~Felix_</a><br>
<br>
</div>
</font></span></div></div>
<br>_______________________________________________<br>
Perl mailing list<br>
<a href="mailto:Perl@perl.org.il">Perl@perl.org.il</a><br>
<a href="http://mail.perl.org.il/mailman/listinfo/perl" target="_blank">http://mail.perl.org.il/mailman/listinfo/perl</a><br></blockquote></div><br></div>