Questions
B.9.1: Where can I find documentation that addresses security issues for MySQL?
B.9.2: Does MySQL 5.5 have native support for SSL?
B.9.3: Is SSL support be built into MySQL binaries, or must I recompile the binary myself to enable it?
B.9.4: Does MySQL 5.5 have built-in authentication against LDAP directories?
B.9.5: Does MySQL 5.5 include support for Roles Based Access Control (RBAC)?
Questions and Answers
B.9.1: Where can I find documentation that addresses security issues for MySQL?
The best place to start is Section 5.3, “General Security Issues”.
Other portions of the MySQL Documentation which you may find useful with regard to specific security concerns include the following:
B.9.2: Does MySQL 5.5 have native support for SSL?
Most 5.5 binaries have support for SSL connections between the client and server. We can't currently build with the new YaSSL library everywhere, as it is still quite new and does not compile on all platforms yet. See Section 5.5.8, “Using SSL for Secure Connections”.
You can also tunnel a connection using SSH, if (for example) the client application doesn't support SSL connections. For an example, see Section 5.5.9, “Connecting to MySQL Remotely from Windows with SSH”.
B.9.3: Is SSL support be built into MySQL binaries, or must I recompile the binary myself to enable it?
Most 5.5 binaries have SSL enabled for client/server connections that are secured, authenticated, or both. However, the YaSSL library currently does not compile on all platforms. See Section 5.5.8, “Using SSL for Secure Connections”, for a complete listing of supported and unsupported platforms.
B.9.4: Does MySQL 5.5 have built-in authentication against LDAP directories?
Not at this time.
B.9.5: Does MySQL 5.5 include support for Roles Based Access Control (RBAC)?
Not at this time.