MySQL - Setting up a Secure (SSL) Connection

[akreider2]

I'm using a Jaguar shared-hosting webserver to connect to a MySQL database that is hosted on a local machine (served up using business cable internet).

I recently looked at the MySQL documentation on how to setup a SSL connection. It is rather complex.

Has anyone done this on Jaguar shared hosting? Are there any problems that I might run into? Or useful advice that you'd have? Are there any ways of making it easier?

Do I need to buy a SSL certificate?

Thanks!

Aaron

[jason]

I've never done it (MySQL over SSL), though I would think it is possible.

You shouldn't need to buy an SSL certificate, as you can create your own (known as a self signed certificate)--how you do it depends on your OS--but you could, potentially, run into problems because the certificate won't be "trusted" by the client (you've probably seen the warnings in your browser when you encounter an untrusted certificate, I don't know how MySQL reacts in that sense). Nonetheless, it should be possible to do it and the self signed certificate will provide the same level of encryption as a purchased certificate.

--Jason

[akreider2]

Here is the documentation on it:
http://dev.mysql.com/doc/refman/5.0/...re-basics.html

I want to run MySQL on a Windows XP server. Yes it's a low budget operation =) And then have my Jaguar shared server connect to that.

[Gwaihir]

I suppose that could work, but a database connection across the net remains far from ideal.

If the database is specifically for your JagPC hosted web-app: why not simply use the MySQL server on your JagPC account?

If you need it mostly locally and the JagPC hosted web-app has but a small bit of interaction with it: have you considered exposing what it needs to your web-app as a web service from a local php installation?

[the_ancient]

I suppose that could work, but a database connection across the net remains far from ideal.

If the database is specifically for your JagPC hosted web-app: why not simply use the MySQL server on your JagPC account?

If you need it mostly locally and the JagPC hosted web-app has but a small bit of interaction with it: have you considered exposing what it needs to your web-app as a web service from a local php installation?

I agree, even if you need a "local" mysql for say a desktop app, It would be far better to use Putty to tunnel in to the server and thenh use that as you "local" connection to a mysql database...