mysql_ssl_set(3)

💖 mysql_ssl_set — bestie, let's lock it down 🔐

okay so this is mysql_ssl_set(3) from the MariaDB Connector/C manual, and it's literally the glow-up button for your database connection. TLS? yes ma'am. let's go 🦋

---

✨ NAME ✨

mysql_ssl_set — sets TLS/SSL options 💅

---

🌸 SYNOPSIS 🌸

#include <mysql.h>

my_bool mysql_ssl_set(MYSQL *mysql,
                      const char *key,
                      const char *cert,
                      const char *ca,
                      const char *capath,
                      const char *cipher)

look at her. six args. main character energy fr. 👑

---

🎀 DESCRIPTION 🎀

so what this one does is set you up for establishing a secure TLS connection. that's the whole vibe. 🔒✨

⚠️ but bestie, listen — you have to call it before you even think about touching mysql_real_connect(3). like, before. not during. not after. before. 🙈

also, and this is important: TLS support has to be enabled in the client library for this function to do literally anything. if it's not enabled, you're just out here calling a function into the void. 💀

you can pass NULL for any parameter you're not using. and like, it always returns zero. always. zero. iconic consistency honestly.

want TLS but don't wanna mess with certificates at all? set every single value to NULL, like so:

mysql_ssl_set(mysql, NULL, NULL, NULL, NULL, NULL)

that right there is the same thing as:

mysql_optionsv(mysql, MYSQL_OPT_SSL_ENFORCE, &yes)

same energy, different font. periodt. 💅

---

🧚 PARAMETER 🧚

• mysql — a mysql handle, which was previously allocated by mysql_init(3). your lil baby connection object 🫶
• key — path to the key file.
• cert — path to the certificate file.
• ca — path to the certificate authority file.
• capath — path to the directory containing the trusted TLS CA certificates in PEM format.
• cipher — list of permitted (SSLv3, TLSv1.0 or TLSv1.2) cipher suites to use for TLS encryption.

---

💜 NOTES 💜

• mysql_real_connect(3) will return an error if attempting to connect and TLS is incorrectly set up. so like… set it up correctly. 😭
• Even if Connector/C supports TLSv1.3 protocol, it is not possible yet to specify TLSv1.3 cipher suites via the cipher parameter. no cap, that's just where we're at. 🥲

---

🌈 SEE ALSO 🌈

• mysql_get_ssl_cipher(3) — go peek at what cipher you ended up with 👀

---

Version 3.4 of the MariaDB Connector/C, bestie — that's the era we're living in. mwah, go encrypt something, i'm obsessed with you 💖✨🎀