Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 2 > Developers' Forum

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
View Poll Results: Do you feel this would be a nice new option?
Yes 2 100.00%
No 0 0%
Voters: 2. You may not vote on this poll

Thread Tools Display Modes
Old 28th January 2010, 05:00
jmroth jmroth is offline
ISPConfig Developer
Join Date: Sep 2005
Posts: 191
Thanks: 1
Thanked 6 Times in 6 Posts
Default Mysql SSL

Hi there,
I have added private branch ISPConfig-2.2.jmroth (copy of stable branch).
Amongst others to follow, this now contains a feature to enable remote access to mysql via SSL only ('GRANT ..... REQUIRE SSL').
I feel this needs discussion on how to make it official, as
- mysql has to support ssl (i.e. it needs to be configured and there need to be certificates created/installed)
- port 3306 needs to be reachable from outside as far as the network/firewall is concerned
[ISPC 2 / Debian Lenny]
Reply With Quote
Sponsored Links
Old 28th January 2010, 09:44
Ben Ben is offline
Join Date: Jul 2006
Posts: 1,029
Thanks: 7
Thanked 62 Times in 56 Posts

I voted yes, eventhough ISPConfig2 is kind of outdated when looking at the existence of ISPConfig3.
Don't get me wrong I still use ISPconfig2 instead of 3 but as I generally plan to migrate to 3, getting features in 2 that I will miss in 3 makes the migration harder.

Another option could be, depending on the requirements, to disallow the remote connection to mysql, e.g. via iptables and moreover set up s-tunnel on both the server and "client" side to take care of the encryption for the remote sql connections.

Anyway a nice feature though. Maybe you might think of "patching" ISPConfig3 as well?
Reply With Quote
Old 28th January 2010, 10:10
jmroth jmroth is offline
ISPConfig Developer
Join Date: Sep 2005
Posts: 191
Thanks: 1
Thanked 6 Times in 6 Posts

First, generally:
I know ISPConfig 3 sounds tempting but I would need to time to familiarize myself with it.
I also wouldn't know if upgrading from 2 to 3 is straightforward and if v3 has at least the same features than v2 and would make me (and my customers) happy.
I also dislike the fact a little bit that v3 apparently is more intrusive, i.e. where "Perfect Setup" guides needed to be followed more or less for v2, v3 tries to do those modifications itself, whereas I prefer to stay in control of the core of my system. This might be a prejudice though.
(Additionally I heard that v2 and v3 run in parallel and the presence of v3 doesn't mean the discontinuation of v2 where the development still goes toward v2.4 etc.)

Now to the subject:
I know there exist other methods, but in any case ISPConfig would need to be involved in either
- setting up iptables (to allow/block the connections)
- setting up stunnel
- configuring mysql
neither of which it currently is responsible for.
Therefore, I am hesitating with proceeding.

So long,
[ISPC 2 / Debian Lenny]

Last edited by jmroth; 28th January 2010 at 10:16.
Reply With Quote
Old 28th January 2010, 11:25
till till is offline
Super Moderator
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 37,036
Thanks: 841
Thanked 5,655 Times in 4,464 Posts

There will be no upgrade from ISPConfig 2 to 3. ISPConfig 3 is a completely different software and has different system requirements, ISPConfig 3 is not an update or replacement for ispconfig 2.

ISPConfig 2 is also not outdated, it is a stable release and developed side by side with ISPConfig 3. By the way, in the alst months, we released more ispconfig 2 updates then ispconfig 3 updates, so you see thst its definately not outdated.
Till Brehm
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote


mysql ssl

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
ISPConfig3 Mail Warn Errors reason8 General 3 25th November 2009 14:58
Add ons for ISPConfig 3 virtue Installation/Configuration 24 16th October 2009 18:30
Management/system config/settings & /server/settings not working!! dactor Installation/Configuration 9 6th February 2008 10:11
Messed up ISPConfig-2.2.8 Upgrade Morons Installation/Configuration 4 29th November 2006 13:17
Mandriva 10.2 Perfect Setup Install Problems... ctroyp Installation/Configuration 12 30th December 2005 17:04

All times are GMT +2. The time now is 03:39.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.