[web2py] Re: MySql encryption using DAL

Very useful. this should go in the book. https://github.com/web2py/web2py-book Would you be able to submit a PR? else I can do it. On Friday, 30 November 2018 15:26:17 UTC-8, appjar...@gmail.com wrote: > > Thanks Massimo. > > These are the steps and syntax to connect to Amazon's RDS using SSL.

[web2py] Re: MySql encryption using DAL

Thanks Massimo. These are the steps and syntax to connect to Amazon's RDS using SSL. *Step1:* Download Amazons's CA certificate from here: https://s3.amazonaws.com/rds-downloads/rds-combined-ca-bundle.pem and save it into web2py/applications/myapp/private/ssl/rds-combined-ca-bundle.pem

[web2py] Re: MySql encryption using DAL

For postgresql it has been there for long time: postgres://{username}:{password}@{domain}:5432/{dbname}?sslmode=require For MySQL it can also be done with current PyDAL. My understanding is that MySQL requires certificates so you 1) you need to install certificates 2) on server side in my

[web2py] Re: MySql encryption using DAL

I was curious if the ability to connect securely to a database service (without an SSH tunnel) was added to 2.17.1? Thanks. On Wednesday, January 31, 2018 at 12:27:01 AM UTC-6, appj...@gmail.com wrote: > > Hi, I wanted to check back to see if there was any update on this. > > With more and

[web2py] Re: MySql encryption using DAL

Hi, I wanted to check back to see if there was any update on this. With more and more database solutions moving to hosted DB services (so no SSH tunnels), Web2Py apps do not have the ability to connect to these securely. We are stuck hosting a dedicated machine to server our MySQL and run

Re: [web2py] Re: MySql encryption using DAL

I am using "autossh" which is a monitor wrapper around ssh that restarts the ssh connection if it gets dropped. It appears to be working well. On Thursday, October 12, 2017 at 4:52:49 PM UTC-5, appj...@gmail.com wrote: > > I'm using Heroku. Would the VPN option be more

Re: [web2py] Re: MySql encryption using DAL

I'm using Heroku. Would the VPN option be more stable/reliable/performant than an SSH tunnel? On Thursday, October 12, 2017 at 8:07:36 AM UTC-5, CDA wrote: > > Depending on the type of cloud service you may be able to setup VPN over > internet and connect your DB via the VPN tunnel. > > On Oct

Re: [web2py] Re: MySql encryption using DAL

Depending on the type of cloud service you may be able to setup VPN over internet and connect your DB via the VPN tunnel. On Oct 11, 2017 11:24 PM, wrote: On Wednesday, October 11, 2017 at 11:52:02 AM UTC-5, Massimo Di Pierro wrote: > > > On Saturday, 7 October 2017

[web2py] Re: MySql encryption using DAL

On Wednesday, October 11, 2017 at 11:52:02 AM UTC-5, Massimo Di Pierro wrote: > > > > On Saturday, 7 October 2017 01:55:53 UTC-5, appj...@gmail.com > wrote: >> >> Thank you Massimo! >> >> There is a great detailed deployment recipe for SSH tunneling to your >> database server from a Heroku

[web2py] Re: MySql encryption using DAL

On Saturday, 7 October 2017 01:55:53 UTC-5, appjar...@gmail.com wrote: > > Thank you Massimo! > > There is a great detailed deployment recipe for SSH tunneling to your > database server from a Heroku app instance (dyno). It works as of this > post.10/8/17 > >

[web2py] Re: MySql encryption using DAL

> > Thank you Massimo, but this presents 2 problems: >> > 1) I am using Heroku for the app and it boots with a non-interactive Procfile. If I put: ssh -L 3307:localhost:3306 myusern...@db.example.com in the procfile, it wants to prompt me for a password through stdin. I could use sshpass

[web2py] Re: MySql encryption using DAL

DAL does not provide https encryption. I do not if the adapters support it either. The solution is to create a SSH tunnel between the server and the database server and the use a URI string connecting to localhost. On Thursday, 5 October 2017 14:21:22 UTC-5, appjar...@gmail.com wrote: > >