SSL Connection support for Spine ?

[eschoeller]

Hello,

In bug#0001646 SSL support was added for Cacti. That is great. Does Spine support SSL connections? I was unable to determine this. If not, I would like to submit a feature request to make it so!

[antras]

I guess it should be added into 1.2, but after testing it does not work for me yet

[Osiris]

It's there already.

[netniV]

Yes it was. The original post was for 0.8.x probably given it's date. We definitely added new configuration file options for SSL keys.

[antras]

Yes it was. The original post was for 0.8.x probably given it's date. We definitely added new configuration file options for SSL keys.

Did anyone test it after implementation?
I've tried to play around with it and non of tested ssl spine configuration worked for me.
SSL connectivity with mysql command line tool works just fine.

[netniV]

It was added as part of this:
https://github.com/Cacti/spine/issues/64

You can check out the commit here:
https://github.com/Cacti/spine/commit/7 ... 5a71c591ef

If you spot anything obviously wrong, then get it logged on GitHub referencing the original issue/commit and we can take a look at it. At the moment, I don't have SSL enabled on mysql, nor the time to implement and re-test it as i'm in the middle of 3 major migrations for clients.

[Dorotholley]

An SSL connection is established though a handshake (a series of communications exchanges) between the client and the server.

SSL handshake
The following diagram shows what happens during an SSL handshake:

Figure 1. SSL handshake

The client sends a request to the server for a secure session. The server responds by sending its X.509 digital certificate to the client.
The client receives the server's X.509 https://buysocialpack.net/product/buy-google-reviews/
The client authenticates the server, using a list of known certificate authorities.
The client generates a random symmetric key and encrypts it using server's public key.
The client and server now both know the symmetric key and can use the SSL encryption process to encrypt and decrypt the information contained in the client request and the server response.
CICS® Transaction Gateway supports the JSSE implementation of SSL. JSSE as supplied with the Java SDK is the only supported option. For more information, see Security.

Authentication
During server authentication, a connection is only established if the client trusts the server based on the information presented by the server to the client in its certificate.

During client authentication (if activated) the client sends its certificate information to the server. A connection is then only established if the client trusts the server and the server trusts the client, based on the information exchanged in both certificates.

Transport Layer Security (TLS)
Network connections between a JEE client and CICS can be secured by the Secure Sockets Layer (SSL) protocol, or the Transport Layer Security (TLS) protocol.
Encryption
https://buysocialpack.net/product/buy-facebook-reviews/is the scientific discipline for the study and development of ciphers, in particular, encryption and decryption algorithms. These cryptographic procedures are the essential components that enable secure communication to take place across networks that are not secure. SSL encryption uses both symmetric and asymmetric keys.
Digital signatures, certificates and key rings
SSL uses digital signatures and digital certificates for establishing a trusted relationship between a sender and a receiver of information sent over a network connection.
Cipher suites
A cipher suite is a set of ciphers (encryption algorithms) used for encrypting sensitive information. SSL uses cipher suites to ensure security and integrity of information transmitted over a network connection. Different cipher suites provide different levels of encryption.

[TheWitness]

So, that's an interesting explanation for what we already understand should and does happen. The feature is there already as @netniV said.