feature request: connect to MySQL over SSL with client certificate about teletraan

[lilida]

I don't think it comes out of box. Per my understanding, it just needs some options to be enabled in connection string. But it shouldn't be too hard to add it. Probably just change MysqlDataSourceFactory.java . Do you have a sample connection string you want to use?

[yosida95]

Nope. I'm not familiar with JDBC and also Java. As I read Connector/J documentation, the parameter would looks like &useSSL=true&requireSSL=true&verifyServerCertificate=true&clientCertificateKeyStoreUrl=/path/to/client-cert.jks&clientCertificateKeyStoreType=JKS&trustCertificateKeyStoreUrl=/path/to/server-cert.jks&trustCertificateKeySToreType=JKS

An alternative MySQL client command line to intended to make same connection is mysql -u user -p --ssl-cert /path/to/client-cert.pem --ssl-key=/path/to/client-key.pem --ssl-ca /path/to/server-ca.pem

The transformation to JSK from PEM is done by converting PEM to DER using openssl, then import it to JKS keystore using keytool.

[lilida]

I have made a change #364 so you can pass connection properties,

for ex,

db:
  type: mysql

  host: ${TELETRAAN_DB_HOST:-localhost}
  port: 3306
  userName: root
  password:
  connectionProperties:
            useSSL: true
            verifyServerCertificate: true

[lilida]

Merged

[yosida95]

Thank you for your quick support! I'll try the latest revision in next few days.