Lost connection to mysql database

[celling]

I have CRM integration based on mysql driver. This integration has been working well for v16 for a long time. After updating 3CX to v18, the connection to the database is lost.
At the same time, voice applications that use this database stop working.
MYSQL database not supported in v18?
(sorry for my language, it's google translate)

 

[Evolute IT]

What version of MySQL are you using?

@edossantos Does MySQL also use TLS 1.2 like MSSQL?

 

[celling]

What version of MySQL are you using?

@edossantos Does MySQL also use TLS 1.2 like MSSQL?

I use Server version: 5.7.23-log MySQL Community Server (GPL) without TLS
this configuration was working on v16

 

[VoIPTools]

Did you update your CFD applications for V18? V16 CFD applications will not work on V18.

 

[celling]

CFD applications have not been updated yet because it is an additional cost for us, but now it's not about that, but about the fact that the connection test with the mysql database does not work.
Before ordering new applications, me need to understand why the connection with the database does not work...

 

[md5]

i have the same problem..
Please fix this

 

[edossantos]

I would like to see some logs to understand why the connection is failing. Do you have any error message you can share?

However, as you say that you're using "Server version: 5.7.23-log MySQL Community Server (GPL) without TLS", my guess is that this will not work. In v18 we enforce TLS 1.2 as a security measure. If that's the issue, there is nothing to fix on the 3CX side, you need to upgrade MySQL to a version that supports TLS 1.2.

 

[md5]

I'm sorry, but why are you forcing the use of TLS in this way?
If I don't need it and don't want to use it...

 

[edossantos]

I'm sorry, but why are you forcing the use of TLS in this way?

Because we take security very seriously here.

 

[md5]

I don't have the ability to manage a remote server with a database, and why did it just simply break when updating? no, why did you break it?
Need a choice to use TLS or not

 

[Evolute IT]

I don't have the ability to manage a remote server with a database, and why did it just simply break when updating? no, why did you break it?
Need a choice to use TLS or not

Where is hosted your MySQL then?

And TLS should be enforced for anything going over the internet.

 

[md5]

I have 2 server, web 3cx and mysql.. They are cross-linked. Why do I need TLS?

 

[Evolute IT]

I have 2 server, web and 3cx.. They are cross-linked. Why do I need TLS?

Look, this is a security measure they put in place and it applies to all database access components or integrations.

The best is just upgrade MySQL on your webserver to one that supports TLS and it will simply work.

 

[md5]

I understand, but you don’t give a choice, I don’t want to use TLS, but you impose it, and here I’m not the only one

 

[edossantos]

I understand, but you don’t give a choice, I don’t want to use TLS, but you impose it, and here I’m not the only one

The problem is that some users are lazy, don't want to spend time on making the system secure, then they get hacked, someone makes calls on their bills, and that's when you come and complain. We make our system secure by default to avoid this.

 

[Evolute IT]

I understand, but you don’t give a choice, I don’t want to use TLS, but you impose it, and here I’m not the only one

Here's a fix: use a PHP script and a REST request instead of direct DB access.

PHP will not care about your security standards.

 

[md5]

it is logical if they find a vulnerability in your code and use it for injection to get access to the 3cx server, then they will get access to the mysql server

i don't understand what to encrypt between 3cx and mysql ?
mysql queries?

or someone setup mirror on switch and will capture traffic

 

[Evolute IT]

i don't understand what to encrypt between 3cx and mysql ?
mysql queries?

The connection itself uses TLS so that queries and results go over the equivalent of HTTPS but for DBs.

it is logical if they find a vulnerability in your code and use it for injection to get access to the 3cx server, then they will get access to the mysql server

More or less, it's more about protecting the data, including credentials, across the internet.

 

[md5]

People should have a choice!!! it is important! and in this case it turns out that you impose.
Free countries, democracy, freedom of speech and choice
And you got it all turned around

This can be taken into account in the license agreement, and it can also be written in the documentation. An example of "turning off" TLS

 

[Evolute IT]

People should have a choice!!! it is important! and in this case it turns out that you impose.
Free countries, democracy, freedom of speech and choice
And you got it all turned around

This can be taken into account in the license agreement, and it can also be written in the documentation. An example of "turning off" TLS

Bruh don't get political here. This is not the medias.

There are security standards and everyone has to deal with them. Not happy? Feel free to use something else.

Instead of turning off TLS, you should enable it. The fact that you can ignore security at that point is astonishing.