Re: SSL connection between Prelude-manager and MySQL
"Paulo Ferreira" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Organization | FCCN |
| Message-ID | <[email protected]> |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello Sebastien, I already patched the libpreludedb and then I recompiled it as you said. W When I'm starting prelude-manager, after I changed the prelude-manager's conf file, I'm getting the following warnings: /usr/local/etc/prelude-manager/prelude-manager.conf:178: invalid option "key" in "global" section. /usr/local/etc/prelude-manager/prelude-manager.conf:179: invalid option "cert" in "global" section I'm not using the "ca" file statement in conf file, only cert and key because I'm using a self-signed certificate. Besides the warnings above, the prelude-manager starts without any problem and connects to the database, but I'm not sure if the connection is established over SSL (I think not). How can I check if the connection was established over SSL? Thanks in advance, best regards, Paulo Ferreira > -----Original Message----- > From: Sebastien Tricaud [mailto:[email protected]] > Sent: segunda-feira, 21 de Abril de 2008 16:24 > To: [email protected] > Cc: [email protected] > Subject: Re: [prelude-user] SSL connection between Prelude-manager and > MySQL > > 2008/4/21 Paulo Ferreira <[email protected]>: > > > > Dear all, > > Hello Paulo, > > > > Is it possible to set up an SSL connection between prelude-manager and > an > > external prelude MySQL database? > > > > It is not, but I wrote a piece of code that should. Can you download: > http://www.wallinfire.net/files/preludedb-mysql-ssl.0.patch > > Download latest libpreludedb source code from trunk. > > Run: > libpreludedb$ patch -p0 < preludedb-mysql-ssl.0.patch > > And recompile. > > > Then, you should change prelude-manager.conf to add, in the [db] section: > > key = /path/to/you/ssl.key > cert = /path/to/you/ssl.cert > ca = /path/to/you/ssl.ca > > Then, change prewikka.conf accordingly if you need this for prewikka as > well. > > > Please give us feedback if it works as expected or not. > > > Thank you, > Sebastien. -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.3 (Build 3017) Charset: us-ascii wj8DBQFIDd/4zlEr5GDkYkwRAvznAJ43k/84Q4RVnCB8o0Y96mTiWQc+qACgmQhQ 3WnU4t1Y7BDY5812JjZco7I= =YqA4 -----END PGP SIGNATURE----- _______________________________________________ Prelude-user site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-user