Re: SSL connection between Prelude-manager and MySQL

"Paulo Ferreira" <[email protected]>
Newsgroups gmane.comp.security.ids.prelude.user
Organization FCCN
Message-ID <[email protected]>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello Sebastien,

I already patched the libpreludedb and then I recompiled it as you said. W

When I'm starting prelude-manager, after I changed the prelude-manager's
conf file, I'm getting the following warnings:

/usr/local/etc/prelude-manager/prelude-manager.conf:178: invalid option
"key" in "global" section.
/usr/local/etc/prelude-manager/prelude-manager.conf:179: invalid option
"cert" in "global" section

I'm not using the "ca" file statement in conf file, only cert and key
because I'm using a self-signed certificate.

Besides the warnings above, the prelude-manager starts without any problem
and connects to the database, but I'm not sure if the connection is
established over SSL (I think not). How can I check if the connection was
established over SSL? 

Thanks in advance, best regards,
Paulo Ferreira

> -----Original Message-----
> From: Sebastien Tricaud [mailto:[email protected]]
> Sent: segunda-feira, 21 de Abril de 2008 16:24
> To: [email protected]
> Cc: [email protected]
> Subject: Re: [prelude-user] SSL connection between Prelude-manager and
> MySQL
> 
> 2008/4/21 Paulo Ferreira <[email protected]>:
> >
> >  Dear all,
> 
> Hello Paulo,
> 
> 
> >  Is it possible to set up an SSL connection between prelude-manager and
> an
> >  external prelude MySQL database?
> >
> 
> It is not, but I wrote a piece of code that should. Can you download:
> http://www.wallinfire.net/files/preludedb-mysql-ssl.0.patch
> 
> Download latest libpreludedb source code from trunk.
> 
> Run:
> libpreludedb$ patch -p0 < preludedb-mysql-ssl.0.patch
> 
> And recompile.
> 
> 
> Then, you should change prelude-manager.conf to add, in the [db] section:
> 
> key = /path/to/you/ssl.key
> cert = /path/to/you/ssl.cert
> ca = /path/to/you/ssl.ca
> 
> Then, change prewikka.conf accordingly if you need this for prewikka as
> well.
> 
> 
> Please give us feedback if it works as expected or not.
> 
> 
> Thank you,
> Sebastien.


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)
Charset: us-ascii

wj8DBQFIDd/4zlEr5GDkYkwRAvznAJ43k/84Q4RVnCB8o0Y96mTiWQc+qACgmQhQ
3WnU4t1Y7BDY5812JjZco7I=
=YqA4
-----END PGP SIGNATURE-----
_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-user
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.