Securing MySQL traffic with stunnel
To encrypt a connection between a mysql client and a mysql server, run two instances of stunnel, one on client site and other on MySQL remote site
Here’s steps how to do it
# wget http://www.stunnel.org/download/stunnel/src/stunnel-4.27.tar.gz # rpmbuild -ta stunnel-4.27.tar.gz # rpm -ivh /usr/src/redhat/RPMS/stunnel-4.27-1.i386.rpm
Create stunnel.pem cert on server site
# openssl genrsa -out privkey.pem 2048 # openssl req -new -x509 -key privkey.pem -out cacert.pem -days 1095 # cat privkey.pem cacert.pem >> /etc/stunnel/stunnel.pem
Set the proper permissions on the resulting private key:
# chmod 0400 /etc/stunnel/stunnel.pem
Set the proper ownership of the stunnel chroot dir
# chown nobody:nobody /var/run/stunnel
