Force SSL on remote MySQL connections

sparek-3

• March 13, 2015 10:43

Is there a way to force all remote MySQL connections to use SSL? The server should not allow non SSL connections from a remote IP address into the MySQL server.

• 

  cPanelMichael

  • March 13, 2015 15:53

  Hello, This is not supported, and will take some manual intervention to get it working. The following third-party URLs should help you get started: Thank you.

  0
• 

  sparek-3

  • March 13, 2015 16:18

  When a MySQL user is created in the cPanel, is a corresponding:
  GRANT USAGE ON ...
  run on the MySQL server? Would it be possible to modify this code to add the REQUIRE SSL to this GRANT query, if the IP address given is a foreign or remote IP address? or something like that.

  0
• 

  cPanelMichael

  • March 13, 2015 16:27

  There's no easy way to do this, but yes, you could setup a custom script to run during MySQL user creation through a script hook: You may need to check with a MySQL developer to see if it's possible to implement the REQUIRE SSL grant on non-local IP addresses. Thank you.

  0

Please sign in to leave a comment.