[ensembl-dev] mysql --ssl-ca option

Andy Yates ayates at ebi.ac.uk
Mon Sep 15 10:11:46 BST 2014


Hi,

I think this will require a hack of the code in a few locations. As far as I am aware we have never used SSL access within Ensembl. Looking at the DBD::mysql docs it seems reasonably straightforward and requires the addition of those extra parameters to the DSN string. Pushing this into the code will be harder as there is no mechanism for providing extra parameters to go into the DSN.

As for hacking this in you'll probably need to target

- ensembl-webcode's DBConnection object (responsible for converting webcode config into a connection)
- ensembl's DBConnection object (responsible for the connection management)
- ensembl's Driver object (responsible for the DSN creation)

If you can come up with a satisfactory generic solution to passing extra params to the DSN then there's no reason why it cannot be rolled into the codebase IMHO.

Andy

------------
Andrew Yates - Ensembl Support Coordinator
European Molecular Biology Laboratory
European Bioinformatics Institute
Wellcome Trust Genome Campus
Hinxton, Cambridge
CB10 1SD, United Kingdom
Tel: +44-(0)1223-492538
Fax: +44-(0)1223-494468
Skype: andrewyatz
http://www.ensembl.org/

On 12 Sep 2014, at 20:48, David Rhee <david.rhee at einstein.yu.edu> wrote:

> Hi all,
> 
> I'm trying to setup two remote hosts for DB and web-engine as shown below.
> 
> Machine #1 = mysql db for homo_sapiens_core, funcgen, otherfeatures and variation_76_38.
> Machine #2 = mysql db for website, and accounts. Plus apache2 for hosting the web code.
> 
> We are going to access machine 1 from machine #2 with SSL option for a login.
> I have *ca.pem on machine #2 and ready to go. My question is which field can I set in the Homo_Sapiens.ini for this SSL option?
> 
> [DATABASE_CORE]
> USER = username
> PASS = password
> HOST = somewhere.edu
> PORT = 3306
> ? = --ssl-ca=/home/user/*ca.pem
> 
> Is this even possible without hacking the code? Thanks in advance.
> 
> David
> _______________________________________________
> Dev mailing list    Dev at ensembl.org
> Posting guidelines and subscribe/unsubscribe info: http://lists.ensembl.org/mailman/listinfo/dev
> Ensembl Blog: http://www.ensembl.info/





More information about the Dev mailing list