SSL

Secure Sockets Layer (SSL) is a protocol for transmitting private documents via the Internet. To get a secure connection, the first thing you need to do is to install OpenSSL Library and download Database Source.

Note: Available only for MySQL, PostgreSQL, MariaDB, MongoDB and Redis. Support from PostgreSQL 8.4 or later.

MySQL / MariaDB

To provide authentication details, enable Use authentication and fill in the required information:

Option	Description
Client Key	The SSL key file in PEM format to use for establishing a secure connection.
Client Certificate	The SSL certificate file in PEM format to use for establishing a secure connection.
CA Certificate	The path to a file in PEM format that contains a list of trusted SSL certificate authorities.
Verify server certificate against CA	Check the server's Common Name value in the certificate that the server sends to the client.
Specified Cipher	A list of permissible ciphers to use for SSL encryption.

PostgreSQL

Choose the SSL Mode:

Mode	Description
require	Only try an SSL connection.
verify-ca	Only try an SSL connection, and verify that the server certificate is issued by a trusted CA.
verify-full	Only try an SSL connection, verify that the server certificate is issued by a trusted CA and that the server hostname matches that in the certificate.

To provide authentication details, enable Use authentication and fill in the required information:

Option	Description
Client Key	The path of the client private key.
Client Certificate	The path of the client certificate.
Root Certificate	The path of the trusted certificate authorities.
Certificate Revocation List	The file path of the SSL certificate revocation list (CRL).

MongoDB

To provide authentication details, enable Use authentication and fill in the required information:

Option	Description
Client Key	The SSL key file in PEM format to use for establishing a secure connection.
Client Key Password	The password of the key file.
Allow any server SSL certificates	Check this option if your MongoDB server allows any server SSL certificates.
CA Certificate	The path to a file in PEM format that contains a list of trusted SSL certificate authorities.
Certificate Revocation List	The file path of the SSL certificate revocation list (CRL).
Allow invalid host names	Check this option to allow invalid hostnames in SSL certificates.

Redis

To provide authentication details, enable Use authentication and fill in the required information:

Option	Description
Client Key	The SSL key file in PEM format to use for establishing a secure connection.
Client Key Password	The password of the key file.
Allow any server SSL certificates	Check this option if your Redis server allows any server SSL certificates.
CA Certificate	The path to a file in PEM format that contains a list of trusted SSL certificate authorities.
Server Name Indication	The Server Name Indication (SNI) value used when establishing the SSL connection to the Redis server.