1
vote
1answer
51 views

Storing Postfix's passwords in MySQL without encryption

I've been struggling with Postfix for past few days. Finally I managed to set it up with virtual mailboxes listed in MySQL and passwords encrypted with PAM. It was just then that I realized I need the ...
1
vote
2answers
31 views

EFS on MySql Data Folder Prevents MySql Service from Starting

I'm trying to encrypt my MySql database at rest. I have been looking at Truecrypt and EFS - I ultimately went with EFS because I can simply encrypt an existing folder without having to create a ...
0
votes
0answers
38 views

Encrypt MySQL column with ssh-key forwarded by ssh-agent

I would like to keep sensitive data such as user's e-mail address in MySQL database in encrypted form. Is it possible to encrypt/decrypt mail column in MySQL using ssh-key forwarded by ssh-agent on ...
0
votes
2answers
220 views

Whats a good way to encrypt a mysql database, and is it worth it?

I know I can encrypt particular fields of a database, but I'm interested in encrypting every field of the database. I want to make sure no one who gains access to a mysql shell but who does not have ...
2
votes
1answer
277 views

Pure FTPd and MySQL, working with sha512

I'm currently developing an application for shared hosting, using a complete MySQL backend for the machine. I've set up all my services, and they're quite operational, however I've a little problem ...
1
vote
1answer
191 views

MariaDB + PAM: Is Remote Auth Secure?

I have a MariaDB instance which is using PAM to auth against Active Directory. Is remote authentication with this service secure? I ran a Wireshark trace during the auth process, and passwords are not ...
3
votes
1answer
1k views

Configured MySQL for SSL , but SSL is still DISABLED..!

I configured SSL for MySQL using the following script. #!/bin/bash # mkdir -p /root/abc/ssl_certs cd /root/abc/ssl_certs # echo "--> 1. Create CA cert, private key" openssl genrsa 2048 > ...
1
vote
0answers
263 views

DB encryption for Django web app without storing key on server

We are setting up a virtual private server (not hosted by us), on which we will be user testing our Django-based web application. The user-generated content produced in these tests will be very ...
6
votes
2answers
8k views

Is MySQL port 3306 encrypted, and if no, how can I encrypt it?

I am working through a security audit for a system at my work and one of the requirements is to encrypt all traffic through public/unprotected networks. Since we are accessing the MySQL database (over ...
0
votes
1answer
297 views

Does MySQL support Intel's AES-NI instructions?

I know that MySQL has the AES_ENCRYPT and AES_DECRYPT instructions; do they use Intel's AES-NI instructions? Are there other encryption options in MySQL and do they support AES-NI? Secondly, if MySQL ...
1
vote
2answers
1k views

SASL (Postfix) authentication with MySQL and Blowfish pre-encrypted passwords

I have a Rails app with the Devise authentication gem running user registration and login. I want to use the db table that Devise populates when a user registers as the table that Postfix uses to ...
3
votes
4answers
776 views

Disk encryption in Debian

I have a Debian Lenny server running a production application. Recently, we are being asked by a consultant to enable disk encryption for data security. He believes full disk encryption will require ...
0
votes
2answers
210 views

Mysql remote encryption

I'm using a remote connection to mysql. Both the webserver and the server with mysql on it will use internal ip addresses to connect. 1) Is encrypting necessary? 2) Is their a built in / simple way ...
3
votes
2answers
527 views

Encrypt connection between apache web server and mysql server

I'm setting up a local webapp. I have a CentOS-5 box that will be the webserver (Apache 2.2). I have another box (RHEL5) that will be used only for MySQL. The data will be encrypted on the webserver ...
7
votes
2answers
2k views

What's the best practice for taking MySQL dump, encrypting it and then pushing to s3?

This current project requires that the DB be dumped, encrypted and pushed to s3. I'm wondering what might be some "best practices" for such a task. As of now I'm using a pretty straight ahead method ...
10
votes
3answers
1k views

Mysql Encryption and Key managment

I am developing a local intranet system in PHP/MySQL to manage our client data. It seems that the best practice would be to encrypt the sensitive data on the MYSQL server as it is being entered. I ...
2
votes
2answers
308 views

How do I set up Apache HTTP authorization with a salt in my password?

I'm using mod_auth_mysql with Apache 2 and MySQL 5 for apache authorization. Right now our passwords are being stored in the plain in our database. As a new requirement, we have to store them with a ...