Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-10726

Official Windows builds do not support TLS 1.2

Details

    • Task
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Fixed
    • 10.4.6
    • SSL
    • None

    Description

      Windows builds of the MariaDB Server should support TLS 1.2.

      However, those builds are done against YaSSL, and the Connector/J page states this:
      "YaSSL doesn't support TLSv1.2, so if MariaDB server is build from sources with YaSSL, only TLSv1 and TLSv1.1 will be available, even for versions > 10.0.15"
      (Source: https://mariadb.com/kb/en/mariadb/mariadb-connector-j-152-release-notes/)

      We only deploy on Windows servers currently, so using TLS 1.2 is not possible for us using official builds.

      Attachments

        Issue Links

          is part of

          Task - A task that needs to be done. MDEV-10953 Replace yassl

          • Major - Major loss of function.
          • Closed
          relates to

          Task - A task that needs to be done. MDEV-16475 Remove yassl

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-18331 Use Libressl instead of yassl for WITH_SSL=bundled

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-18531 Use WolfSSL instead of YaSSL as "bundled" SSL

          • Major - Major loss of function.
          • Closed

          Activity

            Ascending order - Click to sort in descending order
            wlad Vladislav Vaintroub added a comment -

            This was never possible, and currently (and for long time already) all Windows builds are using yassl. The only way to get TLS 1.2 if one is so inclined, is getting rid of yassl replacing with something else. It will probably not happen until after 10.2

            wlad Vladislav Vaintroub added a comment - This was never possible, and currently (and for long time already) all Windows builds are using yassl. The only way to get TLS 1.2 if one is so inclined, is getting rid of yassl replacing with something else. It will probably not happen until after 10.2
            wlad Vladislav Vaintroub added a comment -

            Fixed since WolfSSL has now replaced YASSL

            wlad Vladislav Vaintroub added a comment - Fixed since WolfSSL has now replaced YASSL

            People

              wlad Vladislav Vaintroub
              dkessel Daniel Kessel
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.