Details
-
Bug
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Fixed
-
None
-
None
Description
connection.destroy() kills the running query by opening a side connection and executing KILL <threadId>. To make sure the same server is reached, this side connection uses the socket's remote IP address instead of the configured hostname.
With TLS and certificate validation enabled (a CA is provided or ssl: true), this causes hostname verification to fail, since the certificate is validated against the IP and not the hostname. The side connection then fails, the KILL is never sent and the query keeps running on the server.