Connecting to MySQL via SSL using PHP

Question

I'm writing my first script that will connect via SSL to a MySQL database. I have been doing a lot of reading on the subject and have come across many options on how to set it up; some that apply to my situation and some that don't. Here is my situation:

The MySQL server is on the same machine as the script. My SSL Certificate is installed. Is it secure to simply connect to the database via a page that is using SSL with the following code?

Connecting via https://www.mysitehere.com/myscript.php

$con = mysql_connect("localhost", "username", "password", MYSQL_CLIENT_SSL);
if (!$con) {die('Could not connect: ' . mysql_error());}
mysql_select_db("my_database", $con);

I can see the need for a remote connection, but why would you need SSL for a local one? Would you not preferably connect through a socket? Not sure I understand. — Pekka
– Pekka, Commented Jun 28, 2011 at 19:24
There's (generally) not much reason to use SSL if your server is on the same machine as your client -- it's not like your traffic is going over an insecure/untrusted link, and it will add computational overhead. — Alex Howansky
– Alex Howansky, Commented Jun 28, 2011 at 19:27
I can't see a reason why. If you have a man in the middle or other attack on your machine, it is compromised beyond salvation anyway. — Pekka
– Pekka, Commented Jun 28, 2011 at 19:28

Alfred · Accepted Answer · 2011-07-15 01:20:44Z

1

The MySQL server is on the same machine as the script. My SSL Certificate is installed. Is it secure to simply connect to the database via a page that is using SSL with the following code?

If you control the server(VPS) and PHP is on the same machine as MySQL(only need to allow connections from same machine) than it is pointless to use SSL for MySQL and will only result in overhead. You should just use firewall to protect MySQL like you should also do with memcached.

Otherwise you could read this section from MySQL to configure SSL. I think involves a little bit more than just $con = mysql_connect("localhost", "username", "password", MYSQL_CLIENT_SSL); . For example you need to configure your SSL Certificate:

mysqld --ssl-ca=ca-cert.pem \
       --ssl-cert=server-cert.pem \
       --ssl-key=server-key.pem

answered Jul 15, 2011 at 1:20

Alfred

62k33 gold badges151 silver badges186 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Otter Over a year ago

SSL encrypts the data in transit so its safer in the event it's intercepted, having a firewall setup only doesn't do this. You should have both in an ideal world.

Collectives™ on Stack Overflow

Connecting to MySQL via SSL using PHP

1 Answer 1

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related