id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
28322	Add support for mysql client certificates to dbshell	Paul Tiplady	Paul Tiplady	"A common security procedure for DB access is to require mutual TLS for the DB connection, e.g. as implemented by Google Cloud SQL for their hosted MySQL offering.

This involves specifying a server certificate, client certificate, and client key when connecting.

Django already supports this configuration, it looks like this:



{{{
DATABASES = {
        'default': {
            'ENGINE': 'django.db.backends.mysql',
            'HOST': db_host,
            'NAME': 'test',
            'USER': 'root',
            'PASSWORD': 'root',
            'OPTIONS': {
               'ssl': {
                    'ca': 'server-ca.pem',
                    'cert': 'client-cert.pem',
                    'key': 'client-key.pem',
                }
            },
        },
    }
}}}


However the dbshell command does not support the client cert params ('cert' and 'key'), though it is aware of the server cert param 'ca'.

Should be a trivial fix to add in support for the other 'ssl' parameters required here, I'll take a look."	Cleanup/optimization	closed	Core (Management commands)	1.11	Normal	fixed			Accepted	1	0	0	0	1	0