Software for secure working with remote SQL databases via the network.

SQLRMT is blazing fast software for encrypted connecting and managing your SQL databases in Python!

SQLRMT is asynchronous, uses network traffic protection mechanisms and is extensible.

This program uses my python library paintlog for beautiful logging.

Caution

SQLRMT currently only supports Linux® distributions. Other operating systems such as Windows, MacOS, BSD are not supported.

Caution

At the moment, SQLRMT is under active development, many things may not work, and this version is not recommended for use (all at your own risk).

Contact and support

If you have questions about using SQLRMT, then create an issue in the repository or write to me at bro.alexeev@inbox.ru.

You can also write to me on Telegram: @alexeev_dev

SQLRMT is an Open Source project, and it only survives due to your feedback and support!

Project releases are available at this link.

Requirements

Note

SQLRMT offers the use of a client-server model without the ability to connect multiple clients to one server address.

To run the software you will have to install the necessary programs and dependencies, such as:

• Python interpreter (>=3.10)
• PIP package manager (>=22.0)
• Python libraries (listed in requirements.txt)
• openssl (>=3.0)

Installing

If you want to download a stable release, go to the releases page. If you want to install the latest git version, then follow these steps:

1. Clone this repo

git clone https://github.com/alexeev-engineer/SQLRMT.git
cd SQLRMT

2. Create a working virtual environment and install dependencies

Note

If your shell is fish, then instead of source venv/bin/activate use source venv/bin/activate.fish.

python3 -m venv venv
source venv/bin/activate
pip3 install -r requirements.txt

3. Done! 💪 🎉 You're ready to use SQLRMT!

Configuration

Before starting, you need to create or modify a configuration file sqlrmt.ini. The configuration file must be stored either in the program's working directory or in the path /etc/sqlrmt.ini

[Server]
port=8000
host=0.0.0.0
database=database.sqlite
passphrase=qwerty

[Client]
timeout=3

• Server - server information

• host - IP address (hostname)
• port - port
• passphrase - passphrase to database

• Client - client information

• timeout - timeout for connecting to server

Launch and use

Before you start using SQLRMT, you must first create RSA keys to encrypt traffic!

Note

If you need a different period, then change the value of the -days flag to the desired number of days.

To generate keys we will use openssl:

Caution

Make sure to fill out the Common Name field!

# client: Make sure to fill out the Common Name field!
openssl req -new -newkey rsa:3072 -days 365 -nodes -x509 -keyout client.key -out client.crt

# server: Make sure to fill out the Common Name field!
openssl req -new -newkey rsa:3072 -days 365 -nodes -x509 -keyout server.key -out server.crt

You used openssl to generate server and client keys and certificates. Below are explanations of the flags:

• -newkey - creating a new key with RSA encryption and a length of 3072 bits
• -days - certificate expiration date
• -nodes - need to generate an unencrypted private key
• -x509 - specifies the output certificate format
• -keyout - specifies the output file name

The files client.key, client.crt, server.key, server.crt should have appeared in the directory

All that remains is to start the SQLRMT server:

# client.crt, server.key, server.crt - these are the files we previously created
python3 sqlrmt.py --server --config 'config.ini' --server-key 'server.key' --server-cert 'server.crt' --client-cert 'client.cert'

And launch SQLRMT client:

# client.crt, client.key, server.crt - these are the files we previously created
python3 sqlrmt.py --client --config 'config.ini' --client-key 'client.key' --client-cert 'client.cert' --server-cert server.crt

Functional

Here you can see what SQLRMT can already do and what else is planned to be added in the future:

• Asynchrony support
• Multithread support
• Logging
• Secure and protected connection
• SQL Query Validation
• Database encryption
• Extensions support
• Create GUI
• Support MySQL
• Create Web Interface
• Improve logging
• Improve configuration ini file
• Create SQLRMT installer

Schemes of work

A secure TLS connection is created between clients and the server with asynchronous traffic encryption using the Diffie-Hellman algorithm. The advantage of this algorithm is that even if an attacker obtains the private keys, he will only be able to read past messages. This is called forward secrecy.

SQLRMT uses ssl, socket and asyncio to create an asynchronous secure connection.

Copyright

SQLRMT - blazing fast tool for work with remote databases.

Copyright © 2024 Alexeev Bronislav. All rights reversed.

The registered trademark Linux® is used pursuant to a sublicense from LMI, the exclusive licensee of Linus Torvalds, owner of the mark on a world-wide basis.