MySQL connection over SSL possible?

[A.L.M.Buxey at lboro.ac.uk]

Hi,
> No. Driver is sql_mysql.c file in
> src/modules/rlm_sql/drivers/rlm_sql_mysql/ folder of your distribution.
> You will need to edit the source file and recompile to have  freeradius
> mysql client ask for a SSL connection.

hmm, i could see a future with sql.conf containing

ssl = yes

and each SQL driver, if supported, using SSL method to connect.
would probably also need certs etc in the config for this to happen.

for another option, without editing code, use eg stunnel to connect
to the remote SQL server and then tell FreeRADIUS to use the
local end port of the stunnel session.


alan