Re: MySQL on 3306 with MySQL SSL on 3307

[Steve McLaughlin]

Hi,

Thanks for your input.

This is a lab environment so the risk is accepted.
I have two potential solutions for what I am doing with MySQL connections.

In summary, this is a test environment with a view to commercial application.

1) I can either encrypt MySQL traffic from within the same LAN segment from remote appliances via stunnel or;
2) I can use MySQL SSL support within the same LAN segment.

stunnel provides me a standard SSL connection of which I can use for other services to use also.

So are you saying that if I have tcp/3306 listening on MySQL with SSL enabled, it will also accept connections in the clear? Because after I got MySQL SSL working, the client would no longer connect to 3306 without a client cert.

I would be keen to hear your response as it would be very convenient if the one MySQL port 3306 accepted both SSL and encrypted connections at the same time. (?)

thanks,
Steve