From owner-freebsd-questions@FreeBSD.ORG Wed Oct 22 00:10:50 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E7B541065675 for ; Wed, 22 Oct 2008 00:10:50 +0000 (UTC) (envelope-from bernt@bah.homeip.net) Received: from feeder.usenet4all.se (1-1-1-38a.far.sth.bostream.se [82.182.32.53]) by mx1.freebsd.org (Postfix) with ESMTP id 6E69D8FC08 for ; Wed, 22 Oct 2008 00:10:49 +0000 (UTC) (envelope-from bernt@bah.homeip.net) Received: from [80.217.107.37] (c80-217-107-37.bredband.comhem.se [80.217.107.37]) by feeder.usenet4all.se (8.13.1/8.13.1) with ESMTP id m9M0AkNR046402; Wed, 22 Oct 2008 02:10:46 +0200 (CEST) (envelope-from bernt@bah.homeip.net) Message-ID: <48FE6F87.5070906@bah.homeip.net> Date: Wed, 22 Oct 2008 02:10:47 +0200 From: Bernt Hansson User-Agent: knews (FreeBSD-7.0p3-AMD64) MIME-Version: 1.0 To: John Almberg References: <8B945891-5F96-4FBF-8175-15F67F03DD92@identry.com> In-Reply-To: <8B945891-5F96-4FBF-8175-15F67F03DD92@identry.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org Subject: Re: mysql connection through ssl tunnel X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Oct 2008 00:10:51 -0000 John Almberg said the following on 2008-09-23 15:54: > I have two FreeBSD machines. One is a application server, the other a > database server running mysql. These machines are in two different > locations. I'd like to allow the application server to access mysql > through an SSH tunnel. > > Being a newbie admin, I've never set up an SSH tunnel. I've been reading > about them all morning and (as always) there seems to be more than one > way to skin this cat. > > I'm looking for ease of set up and maintenance, as well as security > (which I assume is a given.) I'd prefer NOT to have to recompile the > kernels (pure cowardice... the application server is a production server > that I don't want to experiment with.) Both servers have OpenSSL. > > Any recommendations, much appreciated. Maybe this can bee of interest. http://www.stunnel.org/examples/mysql.html