Bug #61644 SSL with .net using raw data
Submitted: 25 Jun 2011 13:38 Modified: 22 Jul 2011 16:04
Reporter: wasseim al zouabi Email Updates:
Status: Not a Bug Impact on me:
None 
Category:Connector / NET Severity:S4 (Feature request)
Version: OS:Any
Assigned to: CPU Architecture:Any
Tags: Connector/Net, raw, SSL, X509

[25 Jun 2011 13:38] wasseim al zouabi
Description:
Dear developers,
searching around the web it seems to me that the windows format of pcks#12 isnt as secure as it seems ( please correct me if i am wrong) so i would feel alot safer embedding the certificate inside my application ( since i encyrpt and obfuscate it making it alot harder to earn access to the certificate).
i looked at the source code and it seems in nativedriver.cs u guys are calling
X509Certificate2 clientCert = new X509Certificate2((Settings.CertificateFile,
Settings.CertificatePassword);
the X509Certificate2 class can also take rawbytes with a password as an argument which means i could pass my certificate as bytes if the correct interface was provided.

please advice if there is a way to do that or wether it is meant to be done in future releases. further more , why dont u relieve urselves and us from the whole mess and just ask us to pass an x509 certificate to the connection??

cheers,
wasseim

How to repeat:
its a feature request 

Suggested fix:
please expose the x509 constructor to us so we can pass our own certificates ready with user name and password
[26 Jun 2011 6:45] wasseim al zouabi
anybody?
[21 Jul 2011 2:16] Alexey Kishkin
We're sorry, but the bug system is not the appropriate forum for asking help on using MySQL products. Your problem is not the result of a bug.

Support on using our products is available both free in our forums at http://forums.mysql.com/ and for a reasonable fee direct from our skilled support engineers at http://www.mysql.com/support/

Thank you for your interest in MySQL.
[22 Jul 2011 16:05] wasseim al zouabi
dear Alexey Kishkin,
it is more of a feature request to make ssl connections more .net friendly.
thanks