The MariaDB connector on Windows seems unable to connect to a MariaDB server running on Ubuntu. Although the error (coming from MS Secure Channel) suggests a cipher mismatch, inspection of the ciphers supported on both sides shows 14 ciphers in common, one of which was selected by the server in the Server Hello.
The MySQL connector/C connects fine from Windows to the same MariaDB.
Inspection of the packets using Wireshark did not show an obvious problem. The Client Hello and Server Hello seemed ok (to a non-TLS expert). Stepping through the MariaDB Connector code on the Windows side also didn't show any obvious problem.
I've reached the limits of the debugging that I can do in this context. Are there other errors which MS will put into the "SEC_E_ALGORITHM_MISMATCH" return code? Are there any other known problems with MariaDB Connector/C on Windows? Any other ideas?
Wireshark files and (example self-signed) certificates are available.
To replicate:
(1) Have MariaDB 10.5.8 running on Ubuntu 20.04
In the config file have three lines
ssl-ca=/path/to/rootCA2.crt
ssl-cert=/path/to/sqlserver2.crt
ssl-key=/path/to/sqlserver2.key
add new user as
CREATE USER 'testuser'@'%' IDENTIFIED BY 'ChangeMe' REQUIRE X509;
(2) On Windows, use the command
"C:\Program Files\MariaDB 10.5\bin\mysql.exe" --ssl-cert=C:\Path\to\sqlclient2.crt --ssl-ca=C:\Path\to\rootCA2.crt --ssl-key=C:\Path\to\sqlclient2.key --user=testuser -pChangeMe --host=<ubuntu_hostname> --protocol=tcp --port=3306 --default-character-set=utf8
This should give the error
ERROR 2026 (HY000): SSL connection error: no cipher match. Error 0x80090331(SEC_E_ALGORITHM_MISMATCH)
Apologies if there is anything wrong with these settings, but I feel I have tried as many permutations as I can think of.
Thanks.
Julien Fritsch
made changes -
2021-09-23 07:48
Priority
Major
[ 3
]
Critical
[ 2
]
Vladislav Vaintroub
made changes -
2021-09-27 22:45
Assignee
Georg Richter
[ georg
]
Vladislav Vaintroub
[ wlad
]
Vladislav Vaintroub
made changes -
2021-09-27 23:02
Fix Version/s
N/A
[ 19504
]
Resolution
Not a Bug
[ 6
]
Status
Open
[ 1
]
Closed
[ 6
]
Julien Fritsch
made changes -
2022-01-11 15:33
Workflow
MariaDB connectors
[ 119301
]
MariaDB v4
[ 161241
]
Vladislav Vaintroub
made changes -
2024-07-28 00:38
Resolution
Not a Bug
[ 6
]
Status
Closed
[ 6
]
Stalled
[ 10000
]
Vladislav Vaintroub
made changes -
2024-07-28 01:01
Fix Version/s
3.1
[ 23223
]
Fix Version/s
N/A
[ 19504
]
Vladislav Vaintroub
made changes -
2024-08-05 14:51
issue.field.resolutiondate
2024-08-05 14:51:55.0
2024-08-05 14:51:54.901
Vladislav Vaintroub
made changes -
2024-08-05 14:51
Fix Version/s
3.1.25
[ 29859
]
Fix Version/s
3.1
[ 23223
]
Resolution
Fixed
[ 1
]
Status
In Progress
[ 3
]
Closed
[ 6
]
Ralf Gebhardt
made changes -
2024-11-08 13:59
Fix Version/s
3.1.26
[ 29958
]
Fix Version/s
3.3.13
[ 29959
]
Fix Version/s
3.4.3
[ 29957
]
Fix Version/s
3.1.25
[ 29859
]
{"report":{"fcp":1149.2000007629395,"ttfb":345.80000019073486,"pageVisibility":"visible","entityId":97089,"key":"jira.project.issue.view-issue","isInitial":true,"threshold":1000,"elementTimings":{},"userDeviceMemory":8,"userDeviceProcessors":64,"apdex":0.5,"journeyId":"7d90fabe-3c11-4c68-aa70-99de6c4dd050","navigationType":0,"readyForUser":1228.9000005722046,"redirectCount":0,"resourceLoadedEnd":1426.4000005722046,"resourceLoadedStart":351.1000003814697,"resourceTiming":[{"duration":336.69999980926514,"initiatorType":"link","name":"https://jira.mariadb.org/s/2c21342762a6a02add1c328bed317ffd-CDN/lu2cib/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/css/_super/batch.css","startTime":351.1000003814697,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":351.1000003814697,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":687.8000001907349,"responseStart":0,"secureConnectionStart":0},{"duration":336.69999980926514,"initiatorType":"link","name":"https://jira.mariadb.org/s/7ebd35e77e471bc30ff0eba799ebc151-CDN/lu2cib/820016/12ta74/494e4c556ecbb29f90a3d3b4f09cb99c/_/download/contextbatch/css/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true&whisper-enabled=true","startTime":351.4000005722046,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":351.4000005722046,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":688.1000003814697,"responseStart":0,"secureConnectionStart":0},{"duration":345.6000003814697,"initiatorType":"script","name":"https://jira.mariadb.org/s/0917945aaa57108d00c5076fea35e069-CDN/lu2cib/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/js/_super/batch.js?locale=en","startTime":351.6000003814697,"connectEnd":351.6000003814697,"connectStart":351.6000003814697,"domainLookupEnd":351.6000003814697,"domainLookupStart":351.6000003814697,"fetchStart":351.6000003814697,"redirectEnd":0,"redirectStart":0,"requestStart":351.6000003814697,"responseEnd":697.2000007629395,"responseStart":697.2000007629395,"secureConnectionStart":351.6000003814697},{"duration":408.5999994277954,"initiatorType":"script","name":"https://jira.mariadb.org/s/2d8175ec2fa4c816e8023260bd8c1786-CDN/lu2cib/820016/12ta74/494e4c556ecbb29f90a3d3b4f09cb99c/_/download/contextbatch/js/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true&whisper-enabled=true","startTime":351.70000076293945,"connectEnd":351.70000076293945,"connectStart":351.70000076293945,"domainLookupEnd":351.70000076293945,"domainLookupStart":351.70000076293945,"fetchStart":351.70000076293945,"redirectEnd":0,"redirectStart":0,"requestStart":351.70000076293945,"responseEnd":760.3000001907349,"responseStart":760.3000001907349,"secureConnectionStart":351.70000076293945},{"duration":412.20000076293945,"initiatorType":"script","name":"https://jira.mariadb.org/s/a9324d6758d385eb45c462685ad88f1d-CDN/lu2cib/820016/12ta74/c92c0caa9a024ae85b0ebdbed7fb4bd7/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en","startTime":352,"connectEnd":352,"connectStart":352,"domainLookupEnd":352,"domainLookupStart":352,"fetchStart":352,"redirectEnd":0,"redirectStart":0,"requestStart":352,"responseEnd":764.2000007629395,"responseStart":764.2000007629395,"secureConnectionStart":352},{"duration":412.5,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":352.1000003814697,"connectEnd":352.1000003814697,"connectStart":352.1000003814697,"domainLookupEnd":352.1000003814697,"domainLookupStart":352.1000003814697,"fetchStart":352.1000003814697,"redirectEnd":0,"redirectStart":0,"requestStart":352.1000003814697,"responseEnd":764.6000003814697,"responseStart":764.6000003814697,"secureConnectionStart":352.1000003814697},{"duration":412.5,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":352.4000005722046,"connectEnd":352.4000005722046,"connectStart":352.4000005722046,"domainLookupEnd":352.4000005722046,"domainLookupStart":352.4000005722046,"fetchStart":352.4000005722046,"redirectEnd":0,"redirectStart":0,"requestStart":352.4000005722046,"responseEnd":764.9000005722046,"responseStart":764.9000005722046,"secureConnectionStart":352.4000005722046},{"duration":486,"initiatorType":"link","name":"https://jira.mariadb.org/s/b04b06a02d1959df322d9cded3aeecc1-CDN/lu2cib/820016/12ta74/a2ff6aa845ffc9a1d22fe23d9ee791fc/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":352.5,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":352.5,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":838.5,"responseStart":0,"secureConnectionStart":0},{"duration":412.69999980926514,"initiatorType":"script","name":"https://jira.mariadb.org/rest/api/1.0/shortcuts/820016/47140b6e0a9bc2e4913da06536125810/shortcuts.js?context=issuenavigation&context=issueaction","startTime":352.6000003814697,"connectEnd":352.6000003814697,"connectStart":352.6000003814697,"domainLookupEnd":352.6000003814697,"domainLookupStart":352.6000003814697,"fetchStart":352.6000003814697,"redirectEnd":0,"redirectStart":0,"requestStart":352.6000003814697,"responseEnd":765.3000001907349,"responseStart":765.3000001907349,"secureConnectionStart":352.6000003814697},{"duration":485.69999980926514,"initiatorType":"link","name":"https://jira.mariadb.org/s/3ac36323ba5e4eb0af2aa7ac7211b4bb-CDN/lu2cib/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.css?jira.create.linked.issue=true","startTime":352.9000005722046,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":352.9000005722046,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":838.6000003814697,"responseStart":0,"secureConnectionStart":0},{"duration":412.80000019073486,"initiatorType":"script","name":"https://jira.mariadb.org/s/5d5e8fe91fbc506585e83ea3b62ccc4b-CDN/lu2cib/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.js?jira.create.linked.issue=true&locale=en","startTime":353,"connectEnd":353,"connectStart":353,"domainLookupEnd":353,"domainLookupStart":353,"fetchStart":353,"redirectEnd":0,"redirectStart":0,"requestStart":353,"responseEnd":765.8000001907349,"responseStart":765.8000001907349,"secureConnectionStart":353},{"duration":1071.9000005722046,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":354,"connectEnd":354,"connectStart":354,"domainLookupEnd":354,"domainLookupStart":354,"fetchStart":354,"redirectEnd":0,"redirectStart":0,"requestStart":354,"responseEnd":1425.9000005722046,"responseStart":1425.9000005722046,"secureConnectionStart":354},{"duration":1067.6999998092651,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-init/jira.webresources:bigpipe-init.js","startTime":358.70000076293945,"connectEnd":358.70000076293945,"connectStart":358.70000076293945,"domainLookupEnd":358.70000076293945,"domainLookupStart":358.70000076293945,"fetchStart":358.70000076293945,"redirectEnd":0,"redirectStart":0,"requestStart":358.70000076293945,"responseEnd":1426.4000005722046,"responseStart":1426.4000005722046,"secureConnectionStart":358.70000076293945},{"duration":336,"initiatorType":"xmlhttprequest","name":"https://jira.mariadb.org/rest/webResources/1.0/resources","startTime":850,"connectEnd":850,"connectStart":850,"domainLookupEnd":850,"domainLookupStart":850,"fetchStart":850,"redirectEnd":0,"redirectStart":0,"requestStart":850,"responseEnd":1186,"responseStart":1186,"secureConnectionStart":850}],"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":138,"responseStart":346,"responseEnd":354,"domLoading":349,"domInteractive":1459,"domContentLoadedEventStart":1459,"domContentLoadedEventEnd":1504,"domComplete":2231,"loadEventStart":2231,"loadEventEnd":2232,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[{"name":"bigPipe.sidebar-id.start","time":1433.4000005722046},{"name":"bigPipe.sidebar-id.end","time":1434.1000003814697},{"name":"bigPipe.activity-panel-pipe-id.start","time":1434.2000007629395},{"name":"bigPipe.activity-panel-pipe-id.end","time":1437.9000005722046},{"name":"activityTabFullyLoaded","time":1521}],"measures":[],"correlationId":"536c31987c93f8","effectiveType":"4g","downlink":10,"rtt":0,"serverDuration":146,"dbReadsTimeInMs":26,"dbConnsTimeInMs":36,"applicationHash":"9d11dbea5f4be3d4cc21f03a88dd11d8c8687422","experiments":[]}}