Uploaded image for project: 'MariaDB Connector/J'
  1. MariaDB Connector/J
  2. CONJ-639

enabledSslProtocolSuites does not include TLSv1.2 by default

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 2.2.1
    • Fix Version/s: 2.3.0
    • Component/s: configuration
    • Labels:
      None

      Description

      It is strange and inconvenient that enabledSslProtocolSuites is set to "TLSv1, TLSv1.1" by default. These versions of TLS are being deprecated in favour of TLSv1.2.

      If you're not familiar with the driver's configuration options it can take a while to figure out why you can't connect to a database that is enforcing v1.2

      Ideally the default value would be "TLSv1, TLSv1.1, TLSv1.2"

        Attachments

          Activity

            People

            • Assignee:
              diego dupin Diego Dupin
              Reporter:
              art-bjss Art O Cathain
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: