使用SSL从PHP连接到mySQL

Question

I have a security consultant demanding that we implement encrypted connections to mySQL. He is concerned that the username and pass for the db are being sent cleartext when we connect.

The mysql server is on the same network as the scripts though not the same physical machine. So the credentials will not be passed externally and should be fine unless the server is already compromised.

Am I right that SSL would be overkill?

Answer 1

If you need to implement this security measure, I would set up an encrypted SSH tunnel. On the web server:

ssh -L 3306:localhost:3306 -N [e-mail]

Then connect to MySQL on 127.0.0.1 in your web app, and it will be forwarded to the remote MySQL server over an encrypted SSH tunnel.