Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Installation with DB connection over TLS not possible #16404

Open
pgampe opened this issue Sep 7, 2020 · 3 comments
Open

Installation with DB connection over TLS not possible #16404

pgampe opened this issue Sep 7, 2020 · 3 comments
Labels
Enhancement For new feature suggestions that enhance Matomo's capabilities or add a new report, new API etc. Help wanted Beginner friendly issues or issues where we'd highly appreciate community's help and involvement.
Milestone
Backlog (Help wan...

Comments

@pgampe
Copy link

pgampe commented Sep 7, 2020 •
edited

It is impossible to install Matomo with a remote server which enforces TLS for the DB connection.

The UI does not support SSL settings. Manually adding the config.ini.php results in a successful connection, however makes Matomo believe the setup is already done. There is no obvious way to import the scheme then.

Currently I have to disable TLS support in the DB until Matomo is done with the setup.

Expected behavior:
a) Allow a partial configuration
b) Allow to create the scheme from console
@tsteur tsteur added Enhancement For new feature suggestions that enhance Matomo's capabilities or add a new report, new API etc. Help wanted Beginner friendly issues or issues where we'd highly appreciate community's help and involvement. labels Sep 8, 2020
@tsteur tsteur added this to the Backlog (Help wanted) milestone Sep 8, 2020
@tsteur
Copy link
Member

tsteur commented Sep 8, 2020

@pgampe I think we are supporting this feature so far only after Matomo is installed see https://matomo.org/faq/how-to-install/faq_26273/ so this would require a new feature.

@pgampe
Copy link
Author

pgampe commented Sep 13, 2020

Feel free to make this a feature ... All that is need is a checkbox to enable TLS and maybe a way to choose a CA file (I think that is required by the PHP api if you use TLS).
Without TLS, you are forced to run the DB locally or have some other ways of network encryption in place. This is really required to run Matomo in the cloud without a lot of extra overhead (zero trust networking),

@pgampe
Copy link
Author

pgampe commented Sep 13, 2020

btw, I had to turn of TLS for the installation, because I did not find a way to start the install steps if I configure the DB prior to install.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Enhancement For new feature suggestions that enhance Matomo's capabilities or add a new report, new API etc. Help wanted Beginner friendly issues or issues where we'd highly appreciate community's help and involvement.
Projects
None yet
Milestone
Backlog (Help wanted)
Development

No branches or pull requests
2 participants
@tsteur @pgampe