Force SSL on remote MySQL connections

[sparek-3]

Is there a way to force all remote MySQL connections to use SSL?

The server should not allow non SSL connections from a remote IP address into the MySQL server.

 

[cPanelMichael]

Hello,

This is not supported, and will take some manual intervention to get it working. The following third-party URLs should help you get started:

http://thecpaneladmin.com/installing-ssl-certificate-mysql/

http://stackoverflow.com/questions/16120856/how-to-require-ssl-for-all-remote-users

Thank you.

 

[sparek-3]

When a MySQL user is created in the cPanel, is a corresponding:

GRANT USAGE ON ...

run on the MySQL server?

Would it be possible to modify this code to add the REQUIRE SSL to this GRANT query, if the IP address given is a foreign or remote IP address?

or something like that.

 

[cPanelMichael]

There's no easy way to do this, but yes, you could setup a custom script to run during MySQL user creation through a script hook:

Guide to Standardized Hooks
Guide to Standardized Hooks - Cpanel Functions

You may need to check with a MySQL developer to see if it's possible to implement the REQUIRE SSL grant on non-local IP addresses.

Thank you.