Re: [MediaWiki-l] Mediawiki with AWS RDS MariaDB (TLS Enabled)

[Amanda Quad]

In that case I unfortunately cannot help you further. Someone else will have to 
assist you.
— Amanda


On Monday, February 19, 2018, 4:26 PM, Vladimir Klevko  
wrote:

This is not a problem as currently I do not care about 3rd parties much as
far as the MW installation is running in private subnet of AWS VPC hidden
with tones of security on top. I'm just trying to make MW connect to RDS
instance and this is my problem that it doesn't.

Running php maintenance/install.php with the options for database host,
username and password executes successfully, however MW itself receives
just "Access denied". So that's an issue, but not the security.

Even if you remove all the SSL stuff in the below config the connection is
still not there.

Vladimir

On Mon, Feb 19, 2018 at 9:16 PM, Amanda Quad  wrote:

> ...And that’s the problem.
> You can connect using those default credentials, but they don’t actually
> work for doing anything except connecting to the client.
> You need to configure your own database username and password. Otherwise,
> a third party could hack into your database and take over the site.
> — Amanda
>
>
> On Monday, February 19, 2018, 3:14 PM, Vladimir Klevko 
> wrote:
>
> Imagine that they're real as far as using absolutely the same credentials
> I'm able to connect via the mysql client as I wrote below.
>
> I also tried the following scenario where I cleaned up database completely,
> move LocalSettings.php to the backup and ran the installation script with
> the same outcome, however the installation script ran without any issues.
>
> V.
>
> On Mon, Feb 19, 2018 at 4:48 PM, Amanda Quad  wrote:
>
> > Well, for starters you need to replace the default placeholders of
> > “wiki_db”, “wikiuser”, and “wikipassword” with the actual credentials
> that
> > you are using.
> > — Amanda
> >
> >
> > On Monday, February 19, 2018, 10:37 AM, Vladimir Klevko <
> impu...@gmail.com>
> > wrote:
> >
> > Hello,
> >
> > I'm struggling very hard to make the Mediawiki work together with the AWS
> > RDS running MariaDB with SSL enabled. I've followed the guide on the
> > website and ended up with the following configuration:
> >
> > ## Database settings
> > $wgDBtype = "mysql";
> >
> > $wgDBservers = array(
> >        array(
> >                'host' => "",
> >                'dbname' => "wiki_db",
> >                'user' => "wikiuser",
> >                'password' => "wikipassword",
> >                'type' => "mysql",
> >                'flags' => DBO_SSL,
> >                'load' => 0,
> >                'sslCAFile' => "/var/www/html/rds-combined-ca-bundle.pem"
> >
> >        ),
> > );
> >
> > # MySQL specific settings
> > $wgDBprefix = "";
> >
> > # MySQL table options to use during installation or update
> > $wgDBTableOptions = "ENGINE=InnoDB, DEFAULT CHARSET=binary";
> >
> >
> > # Experimental charset support for MySQL 5.0.
> > $wgDBmysql5 = false;
> >
> > -
> >
> > https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/
> > CHAP_MariaDB.html#MariaDB.Concepts.SSLSupport
> >
> > However I'm always getting the Access Denied error while trying to
> connect
> > with the same credentials and certificate using native MySQL client works
> > just fine
> >
> > Any help is highly appreciated.
> >
> > Many Thanks,
> > Vladimir.
> > ___
> > MediaWiki-l mailing list
> > To unsubscribe, go to:
> > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
> >
> >
> >
> > ___
> > MediaWiki-l mailing list
> > To unsubscribe, go to:
> > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
> >
> ___
> MediaWiki-l mailing list
> To unsubscribe, go to:
> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
>
>
>
> ___
> MediaWiki-l mailing list
> To unsubscribe, go to:
> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
>
___
MediaWiki-l mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l



___
MediaWiki-l mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

Re: [MediaWiki-l] Mediawiki with AWS RDS MariaDB (TLS Enabled)

[Vladimir Klevko]

This is not a problem as currently I do not care about 3rd parties much as
far as the MW installation is running in private subnet of AWS VPC hidden
with tones of security on top. I'm just trying to make MW connect to RDS
instance and this is my problem that it doesn't.

Running php maintenance/install.php with the options for database host,
username and password executes successfully, however MW itself receives
just "Access denied". So that's an issue, but not the security.

Even if you remove all the SSL stuff in the below config the connection is
still not there.

Vladimir

On Mon, Feb 19, 2018 at 9:16 PM, Amanda Quad  wrote:

> ...And that’s the problem.
> You can connect using those default credentials, but they don’t actually
> work for doing anything except connecting to the client.
> You need to configure your own database username and password. Otherwise,
> a third party could hack into your database and take over the site.
> — Amanda
>
>
> On Monday, February 19, 2018, 3:14 PM, Vladimir Klevko 
> wrote:
>
> Imagine that they're real as far as using absolutely the same credentials
> I'm able to connect via the mysql client as I wrote below.
>
> I also tried the following scenario where I cleaned up database completely,
> move LocalSettings.php to the backup and ran the installation script with
> the same outcome, however the installation script ran without any issues.
>
> V.
>
> On Mon, Feb 19, 2018 at 4:48 PM, Amanda Quad  wrote:
>
> > Well, for starters you need to replace the default placeholders of
> > “wiki_db”, “wikiuser”, and “wikipassword” with the actual credentials
> that
> > you are using.
> > — Amanda
> >
> >
> > On Monday, February 19, 2018, 10:37 AM, Vladimir Klevko <
> impu...@gmail.com>
> > wrote:
> >
> > Hello,
> >
> > I'm struggling very hard to make the Mediawiki work together with the AWS
> > RDS running MariaDB with SSL enabled. I've followed the guide on the
> > website and ended up with the following configuration:
> >
> > ## Database settings
> > $wgDBtype = "mysql";
> >
> > $wgDBservers = array(
> >array(
> >'host' => "",
> >'dbname' => "wiki_db",
> >'user' => "wikiuser",
> >'password' => "wikipassword",
> >'type' => "mysql",
> >'flags' => DBO_SSL,
> >'load' => 0,
> >'sslCAFile' => "/var/www/html/rds-combined-ca-bundle.pem"
> >
> >),
> > );
> >
> > # MySQL specific settings
> > $wgDBprefix = "";
> >
> > # MySQL table options to use during installation or update
> > $wgDBTableOptions = "ENGINE=InnoDB, DEFAULT CHARSET=binary";
> >
> >
> > # Experimental charset support for MySQL 5.0.
> > $wgDBmysql5 = false;
> >
> > -
> >
> > https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/
> > CHAP_MariaDB.html#MariaDB.Concepts.SSLSupport
> >
> > However I'm always getting the Access Denied error while trying to
> connect
> > with the same credentials and certificate using native MySQL client works
> > just fine
> >
> > Any help is highly appreciated.
> >
> > Many Thanks,
> > Vladimir.
> > ___
> > MediaWiki-l mailing list
> > To unsubscribe, go to:
> > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
> >
> >
> >
> > ___
> > MediaWiki-l mailing list
> > To unsubscribe, go to:
> > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
> >
> ___
> MediaWiki-l mailing list
> To unsubscribe, go to:
> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
>
>
>
> ___
> MediaWiki-l mailing list
> To unsubscribe, go to:
> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
>
___
MediaWiki-l mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

Re: [MediaWiki-l] Mediawiki with AWS RDS MariaDB (TLS Enabled)

[Amanda Quad]

...And that’s the problem.
You can connect using those default credentials, but they don’t actually work 
for doing anything except connecting to the client.
You need to configure your own database username and password. Otherwise, a 
third party could hack into your database and take over the site.
— Amanda


On Monday, February 19, 2018, 3:14 PM, Vladimir Klevko  
wrote:

Imagine that they're real as far as using absolutely the same credentials
I'm able to connect via the mysql client as I wrote below.

I also tried the following scenario where I cleaned up database completely,
move LocalSettings.php to the backup and ran the installation script with
the same outcome, however the installation script ran without any issues.

V.

On Mon, Feb 19, 2018 at 4:48 PM, Amanda Quad  wrote:

> Well, for starters you need to replace the default placeholders of
> “wiki_db”, “wikiuser”, and “wikipassword” with the actual credentials that
> you are using.
> — Amanda
>
>
> On Monday, February 19, 2018, 10:37 AM, Vladimir Klevko 
> wrote:
>
> Hello,
>
> I'm struggling very hard to make the Mediawiki work together with the AWS
> RDS running MariaDB with SSL enabled. I've followed the guide on the
> website and ended up with the following configuration:
>
> ## Database settings
> $wgDBtype = "mysql";
>
> $wgDBservers = array(
>        array(
>                'host' => "",
>                'dbname' => "wiki_db",
>                'user' => "wikiuser",
>                'password' => "wikipassword",
>                'type' => "mysql",
>                'flags' => DBO_SSL,
>                'load' => 0,
>                'sslCAFile' => "/var/www/html/rds-combined-ca-bundle.pem"
>
>        ),
> );
>
> # MySQL specific settings
> $wgDBprefix = "";
>
> # MySQL table options to use during installation or update
> $wgDBTableOptions = "ENGINE=InnoDB, DEFAULT CHARSET=binary";
>
>
> # Experimental charset support for MySQL 5.0.
> $wgDBmysql5 = false;
>
> -
>
> https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/
> CHAP_MariaDB.html#MariaDB.Concepts.SSLSupport
>
> However I'm always getting the Access Denied error while trying to connect
> with the same credentials and certificate using native MySQL client works
> just fine
>
> Any help is highly appreciated.
>
> Many Thanks,
> Vladimir.
> ___
> MediaWiki-l mailing list
> To unsubscribe, go to:
> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
>
>
>
> ___
> MediaWiki-l mailing list
> To unsubscribe, go to:
> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
>
___
MediaWiki-l mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l



___
MediaWiki-l mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

Re: [MediaWiki-l] Mediawiki with AWS RDS MariaDB (TLS Enabled)

[Vladimir Klevko]

Imagine that they're real as far as using absolutely the same credentials
I'm able to connect via the mysql client as I wrote below.

I also tried the following scenario where I cleaned up database completely,
move LocalSettings.php to the backup and ran the installation script with
the same outcome, however the installation script ran without any issues.

V.

On Mon, Feb 19, 2018 at 4:48 PM, Amanda Quad  wrote:

> Well, for starters you need to replace the default placeholders of
> “wiki_db”, “wikiuser”, and “wikipassword” with the actual credentials that
> you are using.
> — Amanda
>
>
> On Monday, February 19, 2018, 10:37 AM, Vladimir Klevko 
> wrote:
>
> Hello,
>
> I'm struggling very hard to make the Mediawiki work together with the AWS
> RDS running MariaDB with SSL enabled. I've followed the guide on the
> website and ended up with the following configuration:
>
> ## Database settings
> $wgDBtype = "mysql";
>
> $wgDBservers = array(
> array(
> 'host' => "",
> 'dbname' => "wiki_db",
> 'user' => "wikiuser",
> 'password' => "wikipassword",
> 'type' => "mysql",
> 'flags' => DBO_SSL,
> 'load' => 0,
> 'sslCAFile' => "/var/www/html/rds-combined-ca-bundle.pem"
>
> ),
> );
>
> # MySQL specific settings
> $wgDBprefix = "";
>
> # MySQL table options to use during installation or update
> $wgDBTableOptions = "ENGINE=InnoDB, DEFAULT CHARSET=binary";
>
>
> # Experimental charset support for MySQL 5.0.
> $wgDBmysql5 = false;
>
> -
>
> https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/
> CHAP_MariaDB.html#MariaDB.Concepts.SSLSupport
>
> However I'm always getting the Access Denied error while trying to connect
> with the same credentials and certificate using native MySQL client works
> just fine
>
> Any help is highly appreciated.
>
> Many Thanks,
> Vladimir.
> ___
> MediaWiki-l mailing list
> To unsubscribe, go to:
> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
>
>
>
> ___
> MediaWiki-l mailing list
> To unsubscribe, go to:
> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
>
___
MediaWiki-l mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

Re: [MediaWiki-l] Mediawiki with AWS RDS MariaDB (TLS Enabled)

[Amanda Quad]

Well, for starters you need to replace the default placeholders of “wiki_db”, 
“wikiuser”, and “wikipassword” with the actual credentials that you are using.
— Amanda


On Monday, February 19, 2018, 10:37 AM, Vladimir Klevko  
wrote:

Hello,

I'm struggling very hard to make the Mediawiki work together with the AWS
RDS running MariaDB with SSL enabled. I've followed the guide on the
website and ended up with the following configuration:

## Database settings
$wgDBtype = "mysql";

$wgDBservers = array(
        array(
                'host' => "",
                'dbname' => "wiki_db",
                'user' => "wikiuser",
                'password' => "wikipassword",
                'type' => "mysql",
                'flags' => DBO_SSL,
                'load' => 0,
                'sslCAFile' => "/var/www/html/rds-combined-ca-bundle.pem"

        ),
);

# MySQL specific settings
$wgDBprefix = "";

# MySQL table options to use during installation or update
$wgDBTableOptions = "ENGINE=InnoDB, DEFAULT CHARSET=binary";


# Experimental charset support for MySQL 5.0.
$wgDBmysql5 = false;

-

https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_MariaDB.html#MariaDB.Concepts.SSLSupport

However I'm always getting the Access Denied error while trying to connect
with the same credentials and certificate using native MySQL client works
just fine

Any help is highly appreciated.

Many Thanks,
Vladimir.
___
MediaWiki-l mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l



___
MediaWiki-l mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l