Require full verification if SSL is enabled in MySQL

This commit is contained in:
games647
2021-09-23 14:43:24 +02:00
parent aaff7710e0
commit 17ecb186a5

View File

@ -17,8 +17,10 @@ public class MySQLStorage extends SQLStorage {
config.addDataSourceProperty("useSSL", useSSL);
config.addDataSourceProperty("requireSSL", useSSL);
// prefer encrypted if possible
config.addDataSourceProperty("sslMode", "PREFERRED");
if (useSSL) {
// require encrypted if possible
config.addDataSourceProperty("sslMode", "VerifyFull");
}
// adding paranoid hides hostname, username, version and so
// could be useful for hiding server details