Use PaaS database with require_secure_transport

pglombardo / PasswordPusher

🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.

https://docs.pwpush.com

Apache License 2.0

2.02k stars 346 forks source link

Use PaaS database with require_secure_transport #1199

Open sebastienmiro opened 1 year ago

sebastienmiro commented 1 year ago

Checklist

[X] I've searched the project's issues.
[X] I've searched the project's discussions.

❓ Question

How can I use a PaaS database like Azure Database for MySQL server ? An SSL connection is required by default with require_secure_transport set to ON. When this setting is set to ON, the connection can't be established by the Docker container. If this setting is set to OFF, the connection is made but isn't secured.

📎 Additional context

github-actions[bot] commented 1 year ago

Hello @techlifejacket, thanks for contributing to the Password Pusher community! We will respond as soon as possible.

pglombardo commented 1 year ago

Hi @techlifejacket - this is definitely possible but the option to configure the TLS connections aren't available (yet). I can add these but I'm traveling for the next few weeks so I'll have to revisit this once I'm back.

Thanks for pointing this out though. This is a needed option.

I'll post back here once I'm back.

sebastienmiro commented 11 months ago

Hi @pglombardo Any update on this feature ? I can help on Azure DB implementation.

pglombardo commented 7 months ago

Hey @sebastienmiro this issue got lost in the dash. Could you try adding ?sslmode-required to your DATABASE_URL value?

DATABASE_URL=mysql2://username:password@host:port/database?sslmode=required

The Ruby MySQL2 driver has ssl support built in.

pglombardo commented 1 month ago

Hi @sebastienmiro - it's been a while but I just wanted to check in. Let me know how things progressed.

Yudis53732 commented 1 month ago

Perkembangan ala

Pada Min, 1 Sep 2024 22.40, Peter Giacomo Lombardo @.***> menulis:

Hi @sebastienmiro https://github.com/sebastienmiro - it's been a while but I just wanted to check in. Let me know how things progressed.

— Reply to this email directly, view it on GitHub https://github.com/pglombardo/PasswordPusher/issues/1199#issuecomment-2323370709, or unsubscribe https://github.com/notifications/unsubscribe-auth/BKYBPC5N5MXIBHMW5CUMESTZUMRMFAVCNFSM6AAAAABNO4XRDWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDGMRTGM3TANZQHE . You are receiving this because you are subscribed to this thread.Message ID: @.***>