Is there any way to encrypt MySQL connections through coding in VB.NET ?
-
To be frank I am just a QA. I have raised this issue to the developer and he's asking help from me to look for sources to start.abiieez– abiieez2012-07-10 06:03:05 +00:00Commented Jul 10, 2012 at 6:03
-
You have three questions with answers but you have not accepted any answers. Don't forget to upvote and accept useful answers.Eric J.– Eric J.2012-07-10 06:35:22 +00:00Commented Jul 10, 2012 at 6:35
-
I wanted to upvote but couldn't since my reputation point is not sufficient. I have accepted your answer :). Thanksabiieez– abiieez2012-07-10 07:36:48 +00:00Commented Jul 10, 2012 at 7:36
Add a comment
|
1 Answer
No, not "through coding in VB.NET".
VB.Net must communicate using the MySQL communication protocol, which does not support encryption directly.
However, your VB.NET code can communicate securely with MySQL.
The MySQL recommendation is to use SSL to secure communications at the transport layer. That has nothing to do with VB.Net and everything to do with setting up the SSL connection and using an appropriate connection string (include SSL Mode=Required in the connection string).
For details see
http://dev.mysql.com/doc/refman/5.0/en/connector-net-tutorials-ssl.html
5 Comments
abiieez
Thank you for the response. From the documentation "The standard configuration of MySQL is intended to be as fast as possible, so encrypted connections are not used by default." Does this mean the configuration only be done on the server side (without any changes on the client side )?
abiieez
Okay I just get the see the last part of your post. I believe the SSL Mode = Required is the only modification required on the client side.
Eric J.
That is correct. The server must still be compiled with SSL support. On the server run the command
mysqld --ssl --help. If the server complains that it doesn't understand the option --ssl then the server doesn't support SSL.abiieez
One last question Eric. We have a web application (in ASP) which also accessing the MySQL server (it's a local connection so I don't think we need to encrypt this,correct me if I am wrong). If my new server compiled with SSL support, will this affect the web application-MySQL existing communication ? Many Thanks.
Eric J.
If you compile a server with SSL support, non-SSL connections still work (although one can set table permissions to require SSL if one so chooses, I believe). If by "local connection" you mean on the same box, the security risk of not using SSL is minimal.