Skip to content

Add MySQL TLS support#3593

Merged
AlCutter merged 3 commits intogoogle:masterfrom
fghanmi:TLSSupportDB
Aug 16, 2024
Merged

Add MySQL TLS support#3593
AlCutter merged 3 commits intogoogle:masterfrom
fghanmi:TLSSupportDB

Conversation

@fghanmi
Copy link
Copy Markdown
Contributor

@fghanmi fghanmi commented Aug 13, 2024

This PR adds TLS support for MySQL connections in the Trillian server/signer. The key changes include:

  • Added new flags:

    • mysql_tls_ca: Path to the CA certificate file for the MySQL TLS connection.
    • mysql_server_name: Name of the MySQL server to be used as the Server Name in the TLS configuration.
  • TLS Configuration Registration:

    • Added a new function registerTLSConfig() to handle the registration of the custom TLS configuration.

If no TLS configuration is provided, the connection defaults to non-TLS, ensuring backward compatibility.

Issue: #3592

Checklist

Signed-off-by: Firas Ghanmi <fghanmi@redhat.com>
@fghanmi fghanmi requested a review from a team as a code owner August 13, 2024 08:21
@fghanmi fghanmi requested a review from patflynn August 13, 2024 08:21
Signed-off-by: Firas Ghanmi <fghanmi@redhat.com>
@fghanmi fghanmi changed the title Add MySQL TLS support [work in progress] Add MySQL TLS support Aug 13, 2024
@fghanmi fghanmi changed the title [work in progress] Add MySQL TLS support Add MySQL TLS support Aug 13, 2024
@patflynn patflynn requested review from AlCutter and removed request for patflynn August 15, 2024 15:24
@AlCutter
Copy link
Copy Markdown
Member

Hi @fghanmi - thanks for the PR, I've dropped a few comments on for you.
Cheers,
Al.

Signed-off-by: Firas Ghanmi <fghanmi@redhat.com>
@fghanmi
Copy link
Copy Markdown
Contributor Author

fghanmi commented Aug 15, 2024

Hi @fghanmi - thanks for the PR, I've dropped a few comments on for you. Cheers, Al.

Hello @AlCutter,
Thanks for the comments! all done ;)
Thank you!

@AlCutter
Copy link
Copy Markdown
Member

/gcbrun

@AlCutter AlCutter merged commit 0bd653f into google:master Aug 16, 2024
@AlCutter
Copy link
Copy Markdown
Member

Thanks again @fghanmi!

fghanmi added a commit to securesign/trillian that referenced this pull request Aug 17, 2024
Adds TLS support for MySQL connections in the Trillian server/signer.

Key changes include:
- Added new flags:
  + mysql_tls_ca: Path to the CA certificate file for the MySQL TLS connection.
  + mysql_server_name: Name of the MySQL server to be used as the Server Name in the TLS configuration.
- Added a new function registerTLSConfig() to handle the registration of the custom TLS configuration.

If no TLS configuration is provided, the connection defaults to non-TLS, ensuring backward compatibility.

Issue: google#3592
fghanmi added a commit to securesign/trillian that referenced this pull request Aug 17, 2024
Adds TLS support for MySQL connections in the Trillian server/signer.

Key changes include:
- Added new flags:
  + mysql_tls_ca: Path to the CA certificate file for the MySQL TLS connection.
  + mysql_server_name: Name of the MySQL server to be used as the Server Name in the TLS configuration.
- Added a new function registerTLSConfig() to handle the registration of the custom TLS configuration.

If no TLS configuration is provided, the connection defaults to non-TLS, ensuring backward compatibility.

Issue: google#3592
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants