Uploaded image for project: 'MariaDB Connector/C'
  1. MariaDB Connector/C
  2. CONC-391

Unknown SSL error - MariaDB

Details

    • Bug
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Fixed
    • 3.0.8
    • 3.1.6
    • None
    • None
    • HeidiSQL - 10.0.0.5460
      MariaDB - 10.1.37 (with self-signed cert)
      Windows 7 Pro

    Description

      Steps to reproduce:

      • Open HeidiSQL;
      • Configure and Select a SSL connection to MariaDB server;
      • Open the connection;
      • I get message "Unknown SSL error 0x80090308

      The behavior is different on two my PCs. On a desktop I can connect, on a laptop the error occurs.
      Both PCs have basically same configuration (upgrades, tools installed).

      You can see related communication here.

      I can always connect from Ubuntu/Linux or Cygwin via mysql client.

      I'v checked MS documentation it looks to me that problem is in file ma_schannel.c at line 842 – calling QueryContextAttributes.

      Returns SEC_E_INVALID_TOKEN 0x80090308L.

      Attachments

        1. bilbo2.pcap
          83 kB
          Mochour
        2. solid2.pcap
          4 kB
          Mochour

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. CONC-417 Windows clients using Schannel often encounter error SEC_E_INVALID_TOKEN (0x80090308) - The token supplied to the function is invalid

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. CONC-418 Use FormatMessage to get error string for unknown Schannel error codes

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. CONC-432 Use GnuTLS for Windows builds instead of Schannel

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-13492 main.ssl_connect failed with 2026: Unknown SSL error (0x80090308)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Activity

            Ascending order - Click to sort in descending order
            View 8 older comments
            mochour Mochour added a comment -

            I'm sorry, this is my mistake during copying of the cipher list. OpenSSL cipher is not there ...

            This is the correct list:
            TLS_RSA_WITH_AES_256_GCM_SHA384
            TLS_RSA_WITH_AES_128_GCM_SHA256
            TLS_RSA_WITH_AES_256_CBC_SHA256
            TLS_RSA_WITH_AES_128_CBC_SHA256
            TLS_RSA_WITH_AES_256_CBC_SHA
            TLS_RSA_WITH_AES_128_CBC_SHA
            TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256
            TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384
            TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256
            TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P384
            TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P256
            TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384
            TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P256
            TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P384
            TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
            TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
            TLS_DHE_RSA_WITH_AES_256_CBC_SHA
            TLS_DHE_RSA_WITH_AES_128_CBC_SHA
            TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384_P384
            TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256_P256
            TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256_P384
            TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384_P384
            TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256_P256
            TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256_P384
            TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA_P256
            TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA_P384
            TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA_P256
            TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA_P384
            TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
            TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
            TLS_DHE_DSS_WITH_AES_256_CBC_SHA
            TLS_DHE_DSS_WITH_AES_128_CBC_SHA
            TLS_RSA_WITH_3DES_EDE_CBC_SHA
            TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA
            TLS_RSA_WITH_RC4_128_SHA
            TLS_RSA_WITH_RC4_128_MD5
            TLS_RSA_WITH_NULL_SHA256
            TLS_RSA_WITH_NULL_SHA
            SSL_CK_RC4_128_WITH_MD5
            SSL_CK_DES_192_EDE3_CBC_WITH_MD5

            mochour Mochour added a comment - I'm sorry, this is my mistake during copying of the cipher list. OpenSSL cipher is not there ... This is the correct list: TLS_RSA_WITH_AES_256_GCM_SHA384 TLS_RSA_WITH_AES_128_GCM_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA256 TLS_RSA_WITH_AES_128_CBC_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P384 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P256 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P384 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA TLS_DHE_RSA_WITH_AES_128_CBC_SHA TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384_P384 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256_P256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256_P384 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384_P384 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256_P256 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256_P384 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA_P256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA_P384 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA_P256 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA_P384 TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 TLS_DHE_DSS_WITH_AES_256_CBC_SHA TLS_DHE_DSS_WITH_AES_128_CBC_SHA TLS_RSA_WITH_3DES_EDE_CBC_SHA TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA TLS_RSA_WITH_RC4_128_SHA TLS_RSA_WITH_RC4_128_MD5 TLS_RSA_WITH_NULL_SHA256 TLS_RSA_WITH_NULL_SHA SSL_CK_RC4_128_WITH_MD5 SSL_CK_DES_192_EDE3_CBC_WITH_MD5
            mochour Mochour added a comment -

            Windows error - SSL connection error: no cipher match ...

            mochour Mochour added a comment - Windows error - SSL connection error: no cipher match ...
            mochour Mochour added a comment -

            I needed to upgrade to win 10, so the problem disappered. Closing the issue.

            Thanks

            mochour Mochour added a comment - I needed to upgrade to win 10, so the problem disappered. Closing the issue. Thanks
            georg Georg Richter added a comment -

            Closed by user request

            georg Georg Richter added a comment - Closed by user request
            GeoffMontee Geoff Montee (Inactive) added a comment -

            This should be fixed by the fix for MDEV-13492 and CONC-417.

            GeoffMontee Geoff Montee (Inactive) added a comment - This should be fixed by the fix for MDEV-13492 and CONC-417 .

            People

              wlad Vladislav Vaintroub
              mochour Mochour
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.