Uploaded image for project: 'MariaDB Connector/C'
  1. MariaDB Connector/C
  2. CONC-865

TLS verification fails when the server omits the root CA

    XMLWordPrintable

Details

    • New Feature
    • Status: Open (View Workflow)
    • Major
    • Resolution: Unresolved
    • 3.4.11
    • 3.4.12
    • TLS/SSL
    • None
    • MariaDB Server with WolfSSL

    Description

      A server may legitimately send only its leaf certificate (RFC 8446
      allows omitting the trust anchor). wolfSSL-based MariaDB servers do
      this, while OpenSSL-based servers append the CA from ssl_ca. With no
      CA configured on the client, the leaf-only chain was rejected as
      "issuer unknown" instead of being handled like a self-signed
      certificate.

      Attachments

        Activity

          People

            georg Georg Richter
            georg Georg Richter
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.