phpmyadmin / phpmyadmin/phpmyadmin
Allow SSL connection when using arbitrary server
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 7.9k
- Forks
- 3.6k
- Avg merge
- 4d 18h
- Merged PRs (30d)
- 36
Description
2.3) Add setting for using SSL connections in login when $cfg['AllowArbitraryServer']=true
When $cfg['AllowArbitraryServer'] is true, the user can enter the server to connect to, but doesn't have option to enable ssl connection.
[I suggest to try ssl connection first and use it by default for non local machine 127.0.0.1/localhost, if it failed try non-ssl connection and show message about it [as in point 2.2 #12354]]
Motivations:
- Increase usage of MYSQL TLS connections (avoid sniffing/MITM attacks)
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing the login flow used when $cfg['AllowArbitraryServer'] is true, then review issue #12354 for the related fallback and messaging behavior. Clarify whether SSL should be enabled by default, configurable, or retried after failure; done means arbitrary-server logins can use SSL and communicate any fallback clearly.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- mysql, php
- Domain
- databases, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100