Ok, I will check. But I am able to login via mysql -u root -h xx.xx.xx.xx -ppassword --ssl-ca=/var/lib/mysql/Quant-certs/server-ca.pem --ssl-cert=/var/lib/mysql/Quant-certs/client-cert.pem --ssl-key=/var/lib/mysql/Quant-certs/client-key.pem

I have uncommented require_secure_transport = ON in [kamailio].

Now I am getting the error [image: image.png]

Thanks & Regards Jeetha P J

On Tue, Jun 28, 2022 at 4:13 PM Henning Westerholt hw@gilawa.com wrote:

Hello,

the error you get is indicating some generic issue with the username/password.

Try to login using the same credentials by using a command line client (mysql).

Cheers,

Henning

--

Henning Westerholt – https://skalatan.de/blog/

Kamailio services – https://gilawa.com

*From:* sr-dev sr-dev-bounces@lists.kamailio.org *On Behalf Of *Jeetha P J *Sent:* Monday, June 27, 2022 8:56 AM *To:* sr-dev@lists.kamailio.org *Subject:* [sr-dev] How to enable SSL in kamailio mysql db connectivity

Hi Team,

We have SSL in mySQL DB.So I need to add configuration in kamailio also.I am adding the configuration I tried. Please help me to achieve this.Its little urgent.

My /etc/mysql/my.cnf

[client] socket = /run/mysqld/mysqld.sock ssl_key=/var/lib/mysql/Quant-certs/client-key.pem ssl_cert=/var/lib/mysql/Quant-certs/client_ca_cert.pem ssl_ca=/var/lib/mysql/Quant-certs/server-ca.pem #require_secure_transport = ON

[kamailio] socket = /run/mysqld//mysqld.sock #require_secure_transport = ON user = kamailio password = kamailiorw host=xxx.xxx.xxx.xxx default-character-set = utf8 ssl_key=/var/lib/mysql/Quant-certs/client-key.pem ssl_cert=/var/lib/mysql/Quant-certs/client_ca_cert.pem ssl_ca=/var/lib/mysql/Quant-certs/server-ca.pem ssl_verify=1

/etc/kamailio/kamailio.cfg

#!ifndef DBURL #!define DBURL "mysql://kamailio:kamailiorw@xx.xx.xxx.xxx/kamailio" #!endif

gateqeeper-kam-dev kamailio[7879]: 0(7879) DEBUG: db_mysql [km_my_con.c:107]: db_mysql_new_connection(): opening connection: mysql://xxxx:xxxx@xx.xxx.xx.xxx/kamailio Jun 27 06:53:12 gateqeeper-kam-dev kamailio[7879]: 0(7879) ERROR: db_mysql [km_my_con.c:139]: db_mysql_new_connection(): driver error: Access denied for user 'kamailio'@'xx.xxx.xx.xx' (using password: YES)

Please help me to get it solved.

Thanks & Regards

Jeetha P J

*This message contains information that may be privileged or confidential and is the property of the Quantiphi Inc and/or its affiliates. It is intended only for the person to whom it is addressed. **If you are not the intended recipient, any review, dissemination, distribution, copying, storage or other use of all or any portion of this message is strictly prohibited. If you received this message in error, please immediately notify the sender by reply e-mail and delete this message in its entirety*

HI

mysql -u kamailio -h xx.xx.xx.xx -ppassword --ssl-ca=/var/lib/mysql/Quant-certs/server-ca.pem --ssl-cert=/var/lib/mysql/Quant-certs/client_ca_cert.pem --ssl-key=/var/lib/mysql/Quant-certs/client-key.pem

Using this also I am able to login

Thanks & Regards Jeetha P J

On Tue, Jun 28, 2022 at 5:30 PM Henning Westerholt hw@gilawa.com wrote:

Hello,

you are using a different username (kamailio) for the server, try this.

Cheers,

Henning

--

Henning Westerholt – https://skalatan.de/blog/

Kamailio services – https://gilawa.com

*From:* Jeetha P J jeetha.j@quantiphi.com *Sent:* Tuesday, June 28, 2022 1:54 PM *To:* Henning Westerholt hw@gilawa.com *Cc:* Kamailio (SER) - Development Mailing List <sr-dev@lists.kamailio.org

...

*Subject:* Re: [sr-dev] How to enable SSL in kamailio mysql db connectivity

Ok, I will check.

But I am able to login via mysql -u root -h xx.xx.xx.xx -ppassword --ssl-ca=/var/lib/mysql/Quant-certs/server-ca.pem --ssl-cert=/var/lib/mysql/Quant-certs/client-cert.pem --ssl-key=/var/lib/mysql/Quant-certs/client-key.pem

I have uncommented require_secure_transport = ON in [kamailio].

Now I am getting the error

Thanks & Regards

Jeetha P J

On Tue, Jun 28, 2022 at 4:13 PM Henning Westerholt hw@gilawa.com wrote:

Hello,

the error you get is indicating some generic issue with the username/password.

Try to login using the same credentials by using a command line client (mysql).

Cheers,

Henning

--

Henning Westerholt – https://skalatan.de/blog/

Kamailio services – https://gilawa.com

*From:* sr-dev sr-dev-bounces@lists.kamailio.org *On Behalf Of *Jeetha P J *Sent:* Monday, June 27, 2022 8:56 AM *To:* sr-dev@lists.kamailio.org *Subject:* [sr-dev] How to enable SSL in kamailio mysql db connectivity

Hi Team,

We have SSL in mySQL DB.So I need to add configuration in kamailio also.I am adding the configuration I tried. Please help me to achieve this.Its little urgent.

My /etc/mysql/my.cnf

[client] socket = /run/mysqld/mysqld.sock ssl_key=/var/lib/mysql/Quant-certs/client-key.pem ssl_cert=/var/lib/mysql/Quant-certs/client_ca_cert.pem ssl_ca=/var/lib/mysql/Quant-certs/server-ca.pem #require_secure_transport = ON

[kamailio] socket = /run/mysqld//mysqld.sock #require_secure_transport = ON user = kamailio password = kamailiorw host=xxx.xxx.xxx.xxx default-character-set = utf8 ssl_key=/var/lib/mysql/Quant-certs/client-key.pem ssl_cert=/var/lib/mysql/Quant-certs/client_ca_cert.pem ssl_ca=/var/lib/mysql/Quant-certs/server-ca.pem ssl_verify=1

/etc/kamailio/kamailio.cfg

#!ifndef DBURL #!define DBURL "mysql://kamailio:kamailiorw@xx.xx.xxx.xxx/kamailio" #!endif

gateqeeper-kam-dev kamailio[7879]: 0(7879) DEBUG: db_mysql [km_my_con.c:107]: db_mysql_new_connection(): opening connection: mysql://xxxx:xxxx@xx.xxx.xx.xxx/kamailio Jun 27 06:53:12 gateqeeper-kam-dev kamailio[7879]: 0(7879) ERROR: db_mysql [km_my_con.c:139]: db_mysql_new_connection(): driver error: Access denied for user 'kamailio'@'xx.xxx.xx.xx' (using password: YES)

Please help me to get it solved.

Thanks & Regards

Jeetha P J

*This message contains information that may be privileged or confidential and is the property of the Quantiphi Inc and/or its affiliates. It is intended only for the person to whom it is addressed. **If you are not the intended recipient, any review, dissemination, distribution, copying, storage or other use of all or any portion of this message is strictly prohibited. If you received this message in error, please immediately notify the sender by reply e-mail and delete this message in its entirety*

*This message contains information that may be privileged or confidential and is the property of the Quantiphi Inc and/or its affiliates. It is intended only for the person to whom it is addressed. **If you are not the intended recipient, any review, dissemination, distribution, copying, storage or other use of all or any portion of this message is strictly prohibited. If you received this message in error, please immediately notify the sender by reply e-mail and delete this message in its entirety*