[SOLVED] phpMyAdmin certificate not trusted on localhost

[simonhoare]

When I try to access localhost/phpmyadmin (via Firefox and Chromium) the system does so via https and the browser says the certificate is not trusted and asks if I want to continue. While it's more likely to be a faulty set-up on my part, a MITM attack is not entirely unthinkable.

What is the right way to get the browser to trust phpMyAdmin?
I have not touched /etc/phpmyadmin/config.php.

This is the contents of /etc/httpd/conf/sites.d/phpmyadmin.conf, which I slightly amended:

Code: Select all

Alias /phpmyadmin /usr/share/phpmyadmin
<Directory /usr/share/phpmyadmin>
    #Require local granted
    Order deny,allow
    Deny from all
    Allow from 127.0.0.1 192.168
    ErrorDocument 403 "Access denied per /etc/httpd/conf/sites.d/phpmyadmin.c$

    php_flag session.auto_start 0
</Directory>

<Location "/phpmyadmin">
    Options +FollowSymLinks
    RewriteEngine On
    RewriteCond %{SERVER_PORT} ^80$
    RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [R,L]
</Location>

<Directory /usr/share/phpmyadmin/libraries>
    #Require all denied
    Order deny,allow
    Deny from all

</Directory>

MariaDB has a password and Apache itself works fine.

[simonhoare]

Would the MSEC settings help?

[djennings]

phpmyadmin uses a self signed certificate. You could always replace it with a paid for certificate, if you wished.

The certificate is randomly generated when you install phpmyadmin. Just tell your browser to accept the certificate and it will work fine.

[simonhoare]

Well if you think I should trust it, I'm happy to. Done.

[djennings]

Well if you think I should trust it, I'm happy to. Done.

A self signed certificate is just as secure as a commercial one. The only difference is because your browser does not know the issuing authority it throws up that message you saw before accepting the certificate.

If in the future you see another similar message on the same browser, then you have a Man in the middle attack. (Although it is not very likely between 2 applications on the same host).

In Mageia phpmyadmin by default will only work to localhost. If you want to allow other hosts to use it you will need to edit the config file at /etc/httpd/conf/webapps.d/phpmyadmin.conf and restart apache.