History: MySQL SSL

• «
• »

            ! MySQL SSL
Added in ((tiki12))

For some system, e.g. cloud based systems such as ((Windows Azure)), it is recommended to use an SSL connection to the MySQL database.

To enable a MySQL SSL connection, 3 key files must be specified, in PEM format
* Client key. Filename must end with __-key.pem__
* Client cert. Filename must end with __-cert.pem__
* CA cert. Filename must end with __-ca.pem__
These files are placed in the ''tikiroot''/__db/cert__ folder. Tiki will detect these files and initiate an SSL connection. The db/cert folder could look something like this (Azure Clear DB sample)

{img fileId="847"}
''Note: It is assumed that the folder only contains 1 set of keys''.

The MySQL SSL status can be checked in the Admin / Security panel. 
{img fileId="848"}
Starting in Tiki 12.1, the check can also be run from tiki-check.php

If any one of the key files are missing, a regular non-SSL connection is used.

Connecting using SSL requires 
* PHP extension php_openssl.dll must be enabled
* The MySQL server has activated SSL
* Tiki is configured with the 3 key files.