Problem - Kevin Tafuro

if (mysql_real_connect(mysql, host, user, pw, db, port, socket, flags))
result = 1;
if (host_copy) free(host_copy);
return result;
}
If the server is configured to require a peer certificate, the certificate and key to use
can be specified in my.cnf, and you should use mysql_options( ) with the MYSQL_READ_
DEFAULT_GROUP option to read the appropriate configuration group for your application.
The options for the certificate and key to use are ssl-cert and ssl-key, respectively.
In addition, use ssl-ca and ssl-capath to set a file or directory containing
trusted certificates that are to be used when verifying the peer’s certificate. The final
option is ssl-cipher, which can be used to specify a specific cipher or cipher set to be
used. All of these keys also apply for server configuration.
Alternately, you can use the undocumented mysql_ssl_set( ) function to set the key,
certificate, trusted certificate file, trusted certificate directory, and cipher. Because
this function is undocumented, it is possible that it will go away or change at any
point without warning. * The prototype for this function is in mysql.h and is as follows:
int STDCALL mysql_ssl_set(MYSQL *mysql, const char *key, const char *cert,
const char *ca, const char *capath, const char *cipher);
Finally, note that examination of the MySQL-4.0.10-gamma source code (the latest
available at the time of this writing) reveals that if you set a certificate using either
configuration file options or the undocumented mysql_ssl_set( ) API, the client will
attempt to connect to the server using SSLregardless of whether you specify CLIENT_
SSL in the flag passed to mysql_real_connect( ).
PostgreSQL
By default, SSLsupport is disabled when you are building PostgreSQL. To build
PostgreSQLwith OpenSSLsupport enabled, you must specify the --with-openssl
option on the command line to the configuration script. Even with a PostgreSQL
server build that has OpenSSLsupport compiled in, the default is still to have SSL
support disabled. To enable it, you’ll need to set the ssl parameter to on in your
postgresql.conf configuration file. When SSLsupport is enabled, make sure that the
files server.key and server.crt contain the server’s private key and certificate,
respectively. PostgreSQLwill look for the two files in the data directory, and they
must be present for the server to start.
* Versions of MySQLprior to 4.00 seem to have included at least partial support for SSLconnections, but no
configuration options exist to enable it. The function mysql_ssl_set( ) exists in the 3.23 series, and possibly
earlier versions as well, but its signature is different from what exists in 4.00.
Securing Database Connections | 489
This is the Title of the Book, eMatter Edition
Copyright © 2007 O’Reilly & Associates, Inc. All rights reserved.