Using MySQL

Describes switching the ThreadFix database from [the default] HSQL to MySQL

Introduction

To switch ThreadFix to use MySQL instead of HSQL, you'll need to have a couple things ready:

• A ThreadFix instance [available here] (http://www.threadfix.org/download/)
• A MySQL instance [available here] (http://www.mysql.com/downloads/)

Once you have these things, you can start with the instructions in the next section.

These instructions refer to the latest ThreadFix Community zip package, although they should be easy to adapt for other environments.

MySQL Configuration

Create a new user, specifically for ThreadFix, in MySQL. To create a new user run the following commands:

• CREATE DATABASE threadfix;
• CREATE USER '<username>'@'localhost' IDENTIFIED BY '<password>';
• CREATE USER '<username>'@'%' IDENTIFIED BY '<password>';
• GRANT ALL PRIVILIGES ON threadfix.* TO '<username>'@'localhost' IDENTIFIED BY '<password>';
• GRANT ALL PRIVILIGES ON threadfix.* TO '<username>'@'%' IDENTIFIED BY '<password>';
• FLUSH PRIVILIGES;

Replace 'username' and 'password' with your desired credentials.

More information on creating users in MySQL can be found here: Adding Users

Update MySQL Character Set

MySQL does not, by default, support the full Unicode character set. ThreadFix requires the MySQL character set to updated to utf8mb4. Set by step instructions on that process can be found here.

ThreadFix Configuration

First, if ThreadFix doesn't have a folder in tomcat/webapps, unzip the threadfix.war file to a folder named threadfix. Starting the server will unzip the WAR automatically.

• Navigate to tomcat/webapps/threadfix/WEB-INF/classes
• Create a backup of the current properties file. cp jdbc.properties jdbc.properties.bak
• Copy the MySQL properties over the HSQL properties file. cp jdbc.properties.mysql jdbc.properties
• Fields that need to be changed:
  • jdbc.username (MySQL username)
  • jdbc.password (MySQL password)
  • hibernate.hbm2ddl.auto (Simply change the hibernate.hbm2ddl.auto option from 'update' to 'create'.)

After ThreadFix has started successfully change the create option back to update! If the create option is still in place the database will be scratched each time ThreadFix is started.

Running ThreadFix

Now that the configuration is complete start ThreadFix by starting your Tomcat service or running the start script in the ThreadFix zip package.

Once ThreadFix is started open your web browser and navigate to http://localhost:8080/threadfix

The ThreadFix login page will appear.

• Username: user
• Password: password
  Change default login credentials as soon as possible