Details
-
Task
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Fixed
-
None
-
None
-
None
Description
Provide an authentication plugin which supports authentication via SHA256 password.
SHA256 authentication is not used if a TLS connection was established before, or if the password is empty.
Protocol for sha256 authentication.
- server sends 2nd scramble packet to client (length = SCRAMBLE_LENGTH)
- if server public key was not specified via mysql_options, client will send 0x01 to server
- server will return it's public key in pem format.
- client xors password with scramble packet
- client encrypts the xored password with server public key (server requires OAEP padding)
- client sends encrypted password to server
Attachments
Issue Links
- relates to
-
CONJ-327 Handle sha256_password plugin
- Closed
-
CONJ-663 Implement caching_sha2_password plugin
- Closed
-
CONJS-76 Implement sha256_password support
- Closed
-
CONJS-77 Implement caching_sha256_password support
- Closed
-
MXS-1325 Add sha256_password authenticator
- Closed
-
ODBC-241 Add parameter that corresponds to MYSQL_SERVER_PUBLIC_KEY option from MariaDB Connector/C
- Closed
-
CONC-312 Implement caching_sha2_password plugin
- Closed
-
MDEV-9804 Implement a sha256_password / caching_sha256_password plugin
- Open