Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-12160

Modern alternative to the SHA1 authentication plugin

Details

    • 10.1.22

    Description

      Authentication plugin that

      • uses a crypto-hash that is considered secure nowadays
      • does not allow to get the password even if mysql.user is read and the authentication exchange is intercepted
      • as easy to use as native_mysql_authentication plugin, no public/private key files or anything
      • pure plugin

      Attachments

        Issue Links

          duplicates

          Task - A task that needs to be done. MDEV-12701 ACL secured by SHA1 algorithm too weak/out dated

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed
          relates to

          Task - A task that needs to be done. CONJ-501 provide support for authentication plugin ed25519

          • Major - Major loss of function.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. MDEV-9804 Implement a caching_sha256_password plugin

          • Critical - Crashes, loss of data, severe memory leak.
          • Open

          New Feature - A new feature of the product, which has yet to be developed. MDEV-12320 configurable default authentication plugin for the server

          • Critical - Crashes, loss of data, severe memory leak.
          • Stalled

          Task - A task that needs to be done. MDEV-12321 authentication plugin: SET PASSWORD support

          • Major - Major loss of function.
          • Closed

          Activity

            Ascending order - Click to sort in descending order
            serg Sergei Golubchik created issue -
            ratzpo Rasmus Johansson (Inactive) made changes -
            Field Original Value New Value
            Summary SHA-3 authenticatication plugin SHA-3 authentication plugin
            serg Sergei Golubchik made changes -
            Priority Major [ 3 ] Critical [ 2 ]
            serg Sergei Golubchik made changes -
            Summary SHA-3 authentication plugin SHA-2 (or SHA-3) authentication plugin
            serg Sergei Golubchik made changes -
            Description Authentication plugin that
            * uses a crypto-hash that is considered secure nowadays
            * does not allow to get the password even if {{mysql.user}} is read and the authentication exchange is intercepted
            * as easy to use as native_mysql_authentication plugin, no public/private key files or anything
            * pure plugin             		Authentication plugin that
            * uses a crypto-hash that is considered secure nowadays (*not* SHA-1)
            * does not allow to get the password even if {{mysql.user}} is read and the authentication exchange is intercepted
            * as easy to use as native_mysql_authentication plugin, no public/private key files or anything
            * pure plugin
            serg Sergei Golubchik made changes -
            Description Authentication plugin that
            * uses a crypto-hash that is considered secure nowadays (*not* SHA-1)
            * does not allow to get the password even if {{mysql.user}} is read and the authentication exchange is intercepted
            * as easy to use as native_mysql_authentication plugin, no public/private key files or anything
            * pure plugin             		Authentication plugin that
            * uses a crypto-hash that is considered secure nowadays
            * does not allow to get the password even if {{mysql.user}} is read and the authentication exchange is intercepted
            * as easy to use as native_mysql_authentication plugin, no public/private key files or anything
            * pure plugin
            ratzpo Rasmus Johansson (Inactive) made changes -
            Sprint 10.1.22 [ 143 ]
            serg Sergei Golubchik made changes -
            Summary SHA-2 (or SHA-3) authentication plugin Modern alternative to the SHA1 authentication plugin
            serg Sergei Golubchik made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            serg Sergei Golubchik made changes -
            Status In Progress [ 3 ] Stalled [ 10000 ]
            serg Sergei Golubchik made changes -
            Fix Version/s 10.1.22 [ 22502 ]
            Fix Version/s 10.2.5 [ 22117 ]
            Fix Version/s 10.2 [ 14601 ]
            Fix Version/s 5.5 [ 15800 ]
            Fix Version/s 10.0 [ 16000 ]
            Fix Version/s 10.1 [ 16100 ]
            Resolution Fixed [ 1 ]
            Status Stalled [ 10000 ] Closed [ 6 ]
            serg Sergei Golubchik made changes -
            serg Sergei Golubchik made changes -
            serg Sergei Golubchik made changes -
            serg Sergei Golubchik made changes -
            diego dupin Diego Dupin made changes -
            serg Sergei Golubchik made changes -
            Workflow MariaDB v3 [ 79802 ] MariaDB v4 [ 133139 ]

            People

              serg Sergei Golubchik
              serg Sergei Golubchik
              Votes:
              1 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.