SSL problems

[Ensis]

Hello,

I'm testing SQLyog 3.7 on Windows 2000 and I have problems with the SSL Encryption. Mysqld 4.x is running on the server with SSL-Support. Testing SSL with mysql client on the server works fine. I can log in with SQLyog without SSL, but if I activate SSL Encryption SQLyog hangs up without any error message.

Regards

Jan

[Ritesh]

Can you tell me the options that you are using to startup the MySQL server?

[Ensis]

The server is started with the Debian init script ( mysqld_safe ).

The configuration file contains correct entries for ssl-ca, ssl-cert and ssl-key.

Are you looking for a special config option or should I post parts of the config file?

[Altec]

I have the exact same problem.

Server:

Linux (Redhat AS3)

MySQL 4.0.20 (compiled with “–with-openssl” and “–with-vio”)

OpenSSL 0.9.7a

Client:

Windows 2000sp4

SQLYog 3.7 trial

NOTE: we're using a custom port number (not 3306)

Connecting without SSL works fine. But connecting with SSL causes SQLYog to freeze (have to end task to close SQLYog).

Problem occurs both with and without “use compression” option.

SSL is a “must-have” feature for us so we can't use SQLyog without it.

[Ritesh]

Are you able to connect thru SSL using mysql client command line tool?

Note: You should try to connect to the remote server in “client-server” mode using mysql client comand line tool.

[Altec]

Yes, I'm able to connect from the shell prompt on the Linux server.

To verify that mysql ssl is working locally on the server, I:

1. used GRANT to REQUIRE SSL for a user

2. tried to connect locally using 'mysql –skip-ssl' (and got access denied, as expected)

3. tried to connect locally using 'mysql –ssl' (and got the mysql prompt, as expected)

But when I try to connect with SSL using SQLyog, the program freezes and never returns.

I was able to connect to a user that does *not* REQUIRE SSL using SQLyog so I think the problem is with SQLyog support for SSL.

I'm using port 1140 for mysql in case that matters.

[Ritesh]

I understand that connecting from the shell is working fine because the configuration is OK on the server. I want you to try the mysql command line tool from the windows pc.

[Ensis]

I'm running MySQL 4.0.18 on a Debian machine. OpenSSL is 0.9.6c, so I guess it's no problem with a special MySQL or OpenSSL version. I tried the same as Altec ( but on port 3306 ) with the same results. I also tried SQLyog on Windows XP, but it freezes there, too.

If you can tell me where to get a ssl-enabled windows mysql client, I would gladly try it.

[Ritesh]

Unfortunately, it isn't possible to connect with SSL using MySQL Client Library on Windows. It is something MySQL would like to support in the future, but currently there are both technical limitations (the code has not been written) and legal limitations (due to incompatibilities with the GPL).

So, until some time in the foggy future, you can work around this by using some kind of tunneling program. See details here:

http://dev.mysql.com/doc/mysql/en/Windows_and_SSH.html

[Ensis]

Ok, thanks, but why is there an option for SSL in SQLyog? If I understand you right, it should not work for anybody?

[aburden]

😉

Then why does navicat work with ssl from a windows xp box.

It asks for a client cert etc and away it goes. What are they doing right?

http://www.navicat.com

[Ritesh]

We are working on the SSL problem and I will reply back soon.

[dilidolo]

I never tried MySQL built-in SSL feature. Usually I create a ssh tunnel to the server then connect to the MySQL server with SSL and it always work.

[Author]

Posts