RE: SSL-enabled interaction with MySQL

2007-05-03 Thread Guenter Knauf
Hi Naveen, > Followed your last mail. Still getting the same 'SSL connection error' in > the logs. Ueli, the module author, did also test, and told me that he couldnt get it working with the MYSQL_OPT_SSL_VERIFY_SERVER_CERT have set; so he added another directive for that, and by default this par

RE: SSL-enabled interaction with MySQL

2007-05-01 Thread Naveen Rawat
Hi, Followed your last mail. Still getting the same 'SSL connection error' in the logs. -- [Tue May 01 16:16:48 2007] [error] [client 192.168.1.17] MOD_AUTH_MYSQL: MYSQL ERROR: SSL connection error :: connect to DB [Tue May 01 16:16:48 2007] [error] [client 192.168.1.17] host

RE: SSL-enabled interaction with MySQL

2007-05-01 Thread Guenter Knauf
Hi, > Huge regards for your efforts. I am wee bit taking more time as I am also > looking out for other options like using some SSL-supportive > intermediaries; hehe, you wanted a solution for the future, and I contacted already the author; he will add this extension to the module once we have veri

RE: SSL-enabled interaction with MySQL

2007-04-30 Thread Naveen Rawat
Hi, Huge regards for your efforts. I am wee bit taking more time as I am also looking out for other options like using some SSL-supportive intermediaries; > http://svwe10.itex.at/downloads/mod_auth_mysql/ I used the updated source and now the error has become SSL connection specific. --

RE: SSL-enabled interaction with MySQL

2007-04-30 Thread Guenter Knauf
Hi, again a new complete archive: http://svwe10.itex.at/downloads/mod_auth_mysql/ mod_auth_mysql.c source for viewing: http://svwe10.itex.at/downloads/mod_auth_mysql/mod_auth_mysql.c changes summary: http://svwe10.itex.at/downloads/mod_auth_mysql/changes.new shell script from mysql site to create t

RE: SSL-enabled interaction with MySQL

2007-04-30 Thread Guenter Knauf
Hi Naveen, new archive: http://svwe10.itex.at/downloads/mod_auth_mysql/ replaced exists() with accessible() (also borrowed from htpasswd.c); so should now also check for read permissions... Guenter.

RE: SSL-enabled interaction with MySQL

2007-04-30 Thread Guenter Knauf
Hi Naveen, here's what I have hacked so far: http://svwe10.itex.at/downloads/mod_auth_mysql/ to keep the code more readable I've inserted a new function exists() (borrowed from htpasswd.c) which does for now _only_ check if the certs exists; but should be easily extendable for permission check as

RE: SSL-enabled interaction with MySQL

2007-04-30 Thread Guenter Knauf
Hi Naveen, another shot: I'm just also hacking in the module, and I see this few lines above the mysql connect: if (!conf->db_host || strcmp(conf->db_host,"localhost") == 0 || strcmp(conf->db_host,"127.0.0.1") == 0) { db_host = NULL; db_port = 0; } else { ... I'm n

RE: SSL-enabled interaction with MySQL

2007-04-30 Thread Naveen Rawat
Hi Guenter, >> A standalone client is working perfect to provide the SSL layer with the >> database, and it is using the same client lib (libmysqlclient). I used >> common ethereal tool to ensure that everything it does is encrypted. I >> used the same mysql_ssl_set() prior to establishing the c

RE: SSL-enabled interaction with MySQL

2007-04-30 Thread Guenter Knauf
Hi Naveen, > A standalone client is working perfect to provide the SSL layer with the > database, and it is using the same client lib (libmysqlclient). I used > common ethereal tool to ensure that everything it does is encrypted. I > used > the same mysql_ssl_set() prior to establishing the connect

RE: SSL-enabled interaction with MySQL

2007-04-30 Thread Naveen Rawat
Hi there, Thanks for the responses. >>> Does your client library know SSL? Really?) >> >> YES. My database (MySQL) is compiled from source and my end >> libmysqlclient >> supports SSL and that too very well. This already been tested from a very >> basic standalone database client + a packet s

Re: SSL-enabled interaction with MySQL

2007-04-27 Thread Plüm , Rüdiger , VF-Group
> -Ursprüngliche Nachricht- > Von: Guenter Knauf > Gesendet: Freitag, 27. April 2007 18:36 > An: dev@httpd.apache.org > Betreff: RE: SSL-enabled interaction with MySQL > > > Hi all, > although some of us might find the thread here interesting, > some othe

RE: SSL-enabled interaction with MySQL

2007-04-27 Thread Guenter Knauf
Hi all, although some of us might find the thread here interesting, some others might object that it doesnt belong to this list because: - its mysql-related and has nothing to do with Apache itself - we speak here about a third-party module which is also not part of Apache even if we are going to

RE: SSL-enabled interaction with MySQL

2007-04-27 Thread Guenter Knauf
Hi Naveen, >> Does your client library know SSL? Really?) > YES. My database (MySQL) is compiled from source and my end libmysqlclient > supports SSL and that too very well. This already been tested from a very > basic standalone database client + a packet sniffer tool (ethereal). what I'm current

RE: SSL-enabled interaction with MySQL

2007-04-27 Thread Naveen Rawat
Hi Sander, Thanks for the response. I took a bit long to responds this, regrets. >> I tried this (mysql_ssl_set) API but it is really not working from >> within a >> module. It is otherwise working perfect for a standalone client >> application. >> This could be a sort of some core issue.

Re: SSL-enabled interaction with MySQL

2007-04-26 Thread Sander Temme
On Apr 26, 2007, at 5:18 PM, Naveen Rawat wrote: I tried this (mysql_ssl_set) API but it is really not working from within a module. It is otherwise working perfect for a standalone client application. This could be a sort of some core issue. I am ready for an out of box solution to it, if

RE: SSL-enabled interaction with MySQL

2007-04-26 Thread Naveen Rawat
Hi, Thanks for the responses. >> from what it looks here: >> http://dev.mysql.com/doc/refman/5.1/en/mysql-ssl-set.html >> it should be sufficient if you do a call to mysql_ssl_set() before >> calling mysql_real_connect() - provided your client lib is compiled >> with OpenSSL support...; its my u

Re: SSL-enabled interaction with MySQL

2007-04-26 Thread Nick Kew
On Thu, 26 Apr 2007 13:51:04 +0200 Guenter Knauf <[EMAIL PROTECTED]> wrote: > from what it looks here: > http://dev.mysql.com/doc/refman/5.1/en/mysql-ssl-set.html > it should be sufficient if you do a call to mysql_ssl_set() before > calling mysql_real_connect() - provided your client lib is comp

RE: SSL-enabled interaction with MySQL

2007-04-26 Thread Guenter Knauf
Hi Naveen, >>> My communication from my module, is database specific (my MySQL is >>> already >>> SSL-enabled). So is it only up to the MySQL SSL-specific C API to >>> provide >>> SSL (I tried using mysql_ssl_set() with no success) or there has >>> more to be >>> done at my module's code end? >> >>

RE: SSL-enabled interaction with MySQL

2007-04-26 Thread Naveen Rawat
Hi Sander, >> My communication from my module, is database specific (my MySQL is >> already >> SSL-enabled). So is it only up to the MySQL SSL-specific C API to >> provide >> SSL (I tried using mysql_ssl_set() with no success) or there has >> more to be >> done at my module's code end?

Re: SSL-enabled interaction with MySQL

2007-04-26 Thread Sander Temme
On Apr 25, 2007, at 7:02 AM, Naveen Rawat wrote: My communication from my module, is database specific (my MySQL is already SSL-enabled). So is it only up to the MySQL SSL-specific C API to provide SSL (I tried using mysql_ssl_set() with no success) or there has more to be done at my modu

RE: SSL-enabled interaction with MySQL

2007-04-25 Thread Naveen Rawat
Hi Jorge, Thanks for the reply, > > 1. Primarily I wanted to know, if it is possible for an apache > (--enable-mods-shared=all --enable-ssl=shared --enable-so) module to > interact with a SSL-enabled MySQL (--with-openssl=)? > > 2. If yes, then considering that I have got required keys/certifi

Re: SSL-enabled interaction with MySQL

2007-04-25 Thread Jorge Schrauwen
If by interaction you mean access a ssl mysql server from php, asp, coldfusion... then no, that would require the php module to be compiled with ssl. If your talking about modules like mod_auth_mysql then no again since that specific module would need to support ssl. To my knowledge there isn't o

SSL-enabled interaction with MySQL

2007-04-25 Thread Naveen Rawat
Hi there, [I did not get any response :-( on this issue on user's forum so putting it here. Please help me on this.] 1. Primarily I wanted to know, if it is possible for an apache (--enable-mods-shared=all --enable-ssl=shared --enable-so) module to interact with a SSL-enabled MySQL (--with-