Connecting to remote MySQL via SSL

RT Users
1

I have been tasked with migrating our RT database (MySQL) to a remote
server, connection between RT and the database server must be SSL
encrypted.

I see at [1] that DBD::mysql supports SSL, but the RT documentation
[2] seems to imply that RT only supports SSL with PostgreSQL:

$DatabaseRequireSSL

If you're using PostgreSQL and have compiled in SSL support, set

$DatabaseRequireSSL to 1 to turn on SSL communication with the
database.

What is the status of out-of-the-box support for SSL with MySQL in RT 4.2?

Thanks,
Nathan

[1] DBD::mysql - MySQL driver for the Perl5 Database Interface (DBI) - metacpan.org
[2] RT Config - RT 4.2.17 Documentation - Best Practical

2

I have been tasked with migrating our RT database (MySQL) to a remote
server, connection between RT and the database server must be SSL
encrypted.

I see at [1] that DBD::mysql supports SSL, but the RT documentation
[2] seems to imply that RT only supports SSL with PostgreSQL:

$DatabaseRequireSSL

If you're using PostgreSQL and have compiled in SSL support, set

$DatabaseRequireSSL to 1 to turn on SSL communication with the
database.

From a quick skim of the DBIx::SearchBuilder::Handle code[1], that looks
to add “requiressl=1” to the DSN – which, even on Pg, doesn’t do
anything, since the current form is “sslmode=require”[1]. That option
should die, and be replaced by a more generic one that allows one to
append arbitrary things to the DSN – particularly as “enabling SSL”
isn’t really an on/off bit, as one needs to talk about verification of
the certificate in order for it to provide any security.

What is the status of out-of-the-box support for SSL with MySQL in RT
4.2?

Add a local overlay of RT::Handle::BuildDSN to add the relevant DSN
attributes. A future release will provide rope to do this without an
overlay.

  • Alex

[1]

[2] https://metacpan.org/pod/DBD::Pg#connect