Details
-
Task
-
Status: Closed (View Workflow)
-
Blocker
-
Resolution: Fixed
-
None
Description
Currently it's not possible to run MariaDB with a specific TLS protocol, option --ssl_cipher=:TLSv1.2 excludes cipher suites < TLSv1.2, but doesn't set the protocol to TLSv1.2 only.
Suggestion:
--tls-version=versions
|
Valid values are TLSv1, TLSv1.1, TLSv1.2, TLSv1.3 (OpenSSL only) or a combination (separated by comma) of them.
If not specified default=TLSv1,TLSv1.1,TLSv1.2, TLSv1.3 will be used for OpenSSL, TLSv1,TLSv1.1 for Yassl.
Attachments
Issue Links
- blocks
-
MDEV-15596 10.2 doesn't work with openssl 1.1.1
- Closed
-
MDEV-17184 main.ssl* and main.openssl* tests are failing with OpenSSL 1.1.1.
- Closed
-
MDEV-19542 Disable SSLv3 and TLSv1.0 by default
- Closed
- relates to
-
MDEV-19475 Add support for OpenSSL configuration files
- Closed
-
ODBC-228 Add parameter that corresponds to MARIADB_OPT_TLS_VERSION option from MariaDB Connector/C
- Closed
-
CONC-403 Disable TLS v1.0
- Open
-
MDEV-19847 Update mysqladmin man page
- Closed