Module: sems Branch: master Commit: 86e0c45e6314b86c253abfe12ed9a8924a481cc3 URL: https://github.com/sems-server/sems/commit/86e0c45e6314b86c253abfe12ed9a8924a481cc3
Author: Juha Heinanen <[email protected]> Committer: Juha Heinanen <[email protected]> Date: 2015-02-19T11:23:30+02:00 apps/early_accounce: as an example, added possibility to access MySQL server over SSL --- Modified: apps/early_announce/EarlyAnnounce.cpp Modified: doc/Readme.early_announce.txt --- Diff: https://github.com/sems-server/sems/commit/86e0c45e6314b86c253abfe12ed9a8924a481cc3.diff Patch: https://github.com/sems-server/sems/commit/86e0c45e6314b86c253abfe12ed9a8924a481cc3.patch --- diff --git a/apps/early_announce/EarlyAnnounce.cpp b/apps/early_announce/EarlyAnnounce.cpp index 53c0896..bb0106e 100644 --- a/apps/early_announce/EarlyAnnounce.cpp +++ b/apps/early_announce/EarlyAnnounce.cpp @@ -167,7 +167,7 @@ int EarlyAnnounceFactory::onLoad() /* Get default audio from MySQL */ - string mysql_server, mysql_user, mysql_passwd, mysql_db; + string mysql_server, mysql_user, mysql_passwd, mysql_db, mysql_ca_cert; mysql_server = cfg.getParameter("mysql_server"); if (mysql_server.empty()) { @@ -191,6 +191,8 @@ int EarlyAnnounceFactory::onLoad() mysql_db = "sems"; } + mysql_ca_cert = cfg.getParameter("mysql_ca_cert"); + AnnounceApplication = cfg.getParameter("application"); if (AnnounceApplication.empty()) { AnnounceApplication = MOD_NAME; @@ -213,6 +215,10 @@ int EarlyAnnounceFactory::onLoad() #else Connection.set_option(new mysqlpp::ReconnectOption(true)); #endif + if (!mysql_ca_cert.empty()) + Connection.set_option( + new mysqlpp::SslOption(0, 0, mysql_ca_cert.c_str(), "", + "DHE-RSA-AES256-SHA")); Connection.connect(mysql_db.c_str(), mysql_server.c_str(), mysql_user.c_str(), mysql_passwd.c_str()); if (!Connection) { diff --git a/doc/Readme.early_announce.txt b/doc/Readme.early_announce.txt index 024e845..574ed09 100644 --- a/doc/Readme.early_announce.txt +++ b/doc/Readme.early_announce.txt @@ -66,6 +66,10 @@ mysql_passwd=secret # Database where audio is stored (optional, defaults to 'sems') mysql_db=sems +# CA certificate of MySQL server (optional, set if MySQL access over SSL +# is desired) +mysql_ca_cert=/etc/sems/mysql-ssl-ca-cert.pem + # Value of 'application' field in early_announce audio records (optional, # defaults to 'early_announce') application=early_announce _______________________________________________ Semsdev mailing list [email protected] http://lists.iptel.org/mailman/listinfo/semsdev
