MySQL Forums
Forum List  »  Security

x509 proxy certificate Enabling MySQL connection
Posted by: marco fulcoli
Date: March 17, 2005 10:01AM

Hi *, I am Marco.
Just a question:
I recompiled and installed mysqld server with the ssl support and using the mysql client I log in successfully only specifying --ssl-cert and --ssl-key :
./mysql -h db.mysqld.host.name -u uname --ssl --ssl-cert=/tmp/mycert.pem --ssl-key=/tmp/mykey.pem
but this requires that I type my PEM pass phrase: so it needs an interactive mode. My question is:
It is possible to grant the access on the db-server only looking at the client's credentials stored in the x509 proxy certificate that for example, following the grid philosophy of the gsi globus-security, is created with the grid-proxy-init command?
as if I would log-in just in the following way:


[user@host]$ grid-proxy-init
Your identity: /C=IT/O=ESA/OU=ESRIN/CN=Fulcoli Vincenzo/Email=v.fulcoli@acsys.it
Enter GRID pass phrase for this identity:
Creating proxy ......................................................... Done
Your proxy is valid until: Thu Mar 17 22:40:59 2005
[user@host]$ mysql -h db.mysqld.host.name -u uname --ssl --ssl-cert=/tmp/x509up_u500
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 61 to server version: 4.1.10a

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

mysql>

Thank you in advance

Options: ReplyQuote


Subject
Views
Written By
Posted
x509 proxy certificate Enabling MySQL connection
4474
March 17, 2005 10:01AM


Sorry, you can't reply to this topic. It has been closed.

Content reproduced on this site is the property of the respective copyright holders. It is not reviewed in advance by Oracle and does not necessarily represent the opinion of Oracle or any other party.