How to secure MySql connection?

Mateusz TurismoGM

HI! I have problem to secure connection Mysql server with my desktop app.

I want to encrypt my password.

I heared about RSA or SSL but i don't know how to use it.

Please help me. This is how i connect:

private MySqlConnection connection;     
private string server;     
private string database;     
private string uid;     
private string password;

 private void Initialize()    
 {         
   server = "localhost";         
   database = "databaseName";         
   uid = "username";         
   password = "password";         
   string connectionString;         
   connectionString = "SERVER=" + server + ";" + 
   "DATABASE=" + database + ";" + "UID=" + uid + ";" + 
   "PASSWORD=" + password + ";";         
   connection = new MySqlConnection(connectionString);     
  }

5 Replies

Know the answer? Post it — somebody with the same question will find it here.

Mateusz TurismoGM11y ago
I don't want to store passwords in my database! I want to secure connection, not
data in database. When i connect and change data someone can intercept my
password to database and change data. My desktop app connect to mysql server by user acount(created by server admin) I don't need to create any new user.
I think the only way is SSL but i have this error.
Mukesh Kumar11y ago
Hi,

I believe you need to use MD5 encryption to encrypt the password and save it into the database.

http://www.aspnettutorials.com/tutorials/advanced/use-md5-to-encrypt-passwords-with-asp-net-4-0-and-c/

Thanks

mark it accepted if it helps you.
Mateusz TurismoGM11y ago
So i make SSL .
I create cetificates
https://dev.mysql.com/doc/refman/5.0/en/creating-ssl-files-using-openssl.html
and use them like this site show
http://dev.mysql.com/doc/connector-net/en/connector-net-tutorials-ssl.html
but when i use this code
using (MySqlConnection connection = new MySqlConnection
("database=sports_information;user=sslclient;" +
"CertificateFile=c:\\client.pfx" +
"CertificatePassword=pass;" + "SSL Mode=Required "))
{
connection.Open();
}
I have error 'The given path's format is not supported.'
Nilesh Jadav11y ago
Hey !

Read this forums threads and article to make secure sqlconnection using RSA and SSL

1) http://thesqldude.com/2012/04/21/setting-up-ssl-encryption-for-sql-server-using-certificates-issues-tips-tricks/

2) http://stackoverflow.com/questions/2993135/encryption-from-c-sharp-application

3) http://stackoverflow.com/questions/1922313/using-securestring-for-a-sql-connection

Thank you !

mark it accepted if you are satisfy with the answer
Ravi Kumar11y ago
hi
if you developing web application mean
you can apply ssl certification in iis itself