php - PDO with self signed certificates -

-

i'm still tryin connect pdo remote mysql database. customer provide self signed certificates, client-key.pem , client-cert.pem. certificates good, can connect remote db using mysql client. instantiate pdo object connect db.

pdodb = new pdo(   'mysql:host=customer_host_name;dbname=customer_db_name',    'my_username',    'my_password',    array(    pdo::mysql_attr_ssl_key=>'c:/apache24/htdocs/client/lib/client-key.pem',    pdo::mysql_attr_ssl_cert=>'c:/apache24/htdocs/client/lib/client-cert.pem'   ));

i'm getting error when instantiate pdo object:

warning: pdo::__construct(): ssl operation failed code 1. openssl error messages: error:14090086:ssl routines:ssl3_get_server_certificate:certificate verify failed in c:\apache24\htdocs\customer\lib\database.php on line 17

i think code correct i'm newbie php.

update pardon me. forgot mention didn't specify value mysql_attr_ssl_ca because customer doesn't give me one. sorry. mysql_attr_ssl_ca mandatory pdo (or mysqli)?

when generating certificates have use right "common name" each one:

ca: hostname  server: fqdn, e.g. hostname.example.com  client: somename

the important part server certificate common name has same host connecting to, e.g. hostname.example.com.

$pdodb = new pdo(   'mysql:host=customer_host_name;dbname=customer_db_name',    'my_username',    'my_password',    array(     pdo::mysql_attr_ssl_key    => 'c:/apache24/htdocs/client/lib/client-key.pem',     pdo::mysql_attr_ssl_cert   => 'c:/apache24/htdocs/client/lib/client-cert.pem',     pdo::mysql_attr_ssl_ca     => 'c:/apache24/htdocs/client/lib/ca-cert.pem',     pdo::mysql_attr_ssl_cipher => 'camellia128-sha'   ) );

Comments

Post a Comment

Popular posts from this blog

how to insert data php javascript mysql with multiple array session 2 -

-
i have method method discussed , successful data entered 1 when more 1 can not database this programs my php form : <form class="form-horizontal" id="form-produk"> <div class="control-group" > <label class="control-label" for="kelas">kategori</label> <div class="controls"> <select class='form-control' name='id_kategori'> <?php $tampil=mysql_query("select * kategori order nama_kategori"); if ($id_kat==0){ echo "<option value=0 selected>- pilih kategori -</option>"; } while($w=mysql_fetch_array($tampil)){ if ($id_kat==$w[id_kategori]){ echo "<option value=$w[id_kategori] selected>$w[nama_kategori]</option>"; } else{ echo "<option value=$w[id_kategori]>$...
Read more

multithreading - Exception in Application constructor -

-
i wanna write snake game javafx , there exception don't know , want know how fix it. ( know it's not complete yet ) and want know , class extends application ( start override ) main in other programs? see , here not static void main bc didn't need, if want add main shoud do? it's exeption... exception in application constructor exception in thread "main" java.lang.nosuchmethodexception: main_snake.main([ljava.lang.string;) @ java.lang.class.getmethod(class.java:1819) @ com.intellij.rt.execution.application.appmain.main(appmain.java:125) and code : import javafx.animation.animationtimer; import javafx.application.application; import javafx.event.eventhandler; import javafx.scene.scene; import javafx.scene.canvas.canvas; import javafx.scene.canvas.graphicscontext; import javafx.scene.input.keyevent; import javafx.scene.layout.borderpane; import javafx.scene.paint.color; import javafx.stage.stage; import java.util.arraylist; /** * creat...
Read more

windows - CertCreateCertificateContext returns CRYPT_E_ASN1_BADTAG / 8009310b -

-
i realize similar post others (e.g. this one ), there details missing posts might significant case. to start with, here's simplified program: #include "stdafx.h" #include <windows.h> #include <wincrypt.h> int _tmain(int argc, _tchar* argv[]) { // usage: certextract certpath char keyfile[] = "c:\\certificates\\public.crt"; byte lp[65536]; security_attributes sa; handle hkeyfile; dword bytes; pccert_context certcontext; sa.nlength = sizeof(sa); sa.lpsecuritydescriptor = null; sa.binherithandle = false; hkeyfile = createfile(keyfile, generic_read, file_share_read, &sa, open_existing, file_attribute_normal, null); if (hkeyfile) { if (readfile(hkeyfile, lp, getfilesize(hkeyfile, null), &bytes, null) && bytes > 0) { certcontext = certcreatecertificatecontext(x509_asn_encoding, lp, bytes); if (certcontext) { printf("yay...
Read more