Added in tiki12
To enable a MySQL SSL connection, key files must be specified, in PEM format.
Depending on the case, only the CA can be sufficient to configure an SSL Connection (like for AWS Lightsail and Azure Database for MySQL flexible server) or the following 3 files are required.
- Client key. Filename must end with -key.pem
- Client cert. Filename must end with -cert.pem
- CA cert. Filename must end with -ca.pem
These files are placed in the tikiroot/db/cert folder. Tiki will detect these files and initiate an SSL connection. The db/cert folder could look something like this (Azure Clear DB sample).
See how you can create SSL certificates and keys using openssl for MySQL.
Note: It is assumed that the folder only contains 1 set of keys.
The MySQL SSL status can be checked in the Admin / Security panel.
Starting in Tiki 12.1, the check can also be run from tiki-check.php
If any one of the key files are missing, a regular non-SSL connection is used.
Connecting using SSL requires
- PHP extension php_openssl.dll must be enabled
- The MySQL server has activated SSL
- Tiki is configured with the 3 key files.