Support SSL-only connections

[jaraco]

I'd like to employ phpMyAdmin against an Azure-hosted MySQL instance, which by default enforces SSL. Deploying this container against such an instance results in an error message:

#2001 - SSL Connection is required. Please specify SSL options and retry.

I see that phpMyAdmin itself supports SSL connections to the server, but the functionality is not supported except (possibly) through the user-defined settings hook (/etc/phpmyadmin/config.user.inc.php).

I've filed phpmyadmin/phpmyadmin#13436 suggesting a feature that would obviate the need for Docker support in this simple use case, but in lieu of that possibly ambitious request, I propose two things this project could do:

• In this ticket (or in the readme), provide a recipe describing how one could use a Dockerfile (or similar) to supply the necessary user-defined settings hook to enable SSL.

• Provide direct support for SSL in the PMA_* settings.

So first, since I'm new to this project, I'm looking for guidance on my suggestions above. Is this something this project would like to support? Are the ideas sound? Do you have alternate ideas? What approach would you prefer? How can I help?

[nijel]

This is supported in phpMyAdmin, you can already do that using custom configuration, though we can certainly export the SSL options to Docker environment.

[seanareed]

Forgive me if this is not related:

I'm trying to add phpMyAdmin to an HTTPS site using the phpmyadmin/phpmyadmin:4.8 image and a docker-compose.yml file.

The Docker Hub page appears to only provide specification for port :80 in the resulting container. As might be expected, adding ports 8080:80 to my docker-compose.yml and appending :8080 to my HTTPS URL (*:443 in Apache VirtualHost) gives me a blank browser page and an "ERR_SSL_PROTOCOL_ERROR".

Is there a port I can specify so I can access the phpmyadmin service over HTTPS, or is there another way to do this?

Is that what you meant by "we can export SSL options to Docker environment"?

[mredig]

@seanareed no - this is referring to using ssl to secure the connection between PMA and the sql server itself, you're referring to accessing PMA over a secure connection in your browser.

@nijel +1 on requesting being able to set ssl without having to edit the conf files via a volume or something

[ihattab]

@seanareed I have the same problem as you how did you fix it, please ??