Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-16902

openssl_6975 test fail

    XMLWordPrintable

Details

    • Bug
    • Status: Open (View Workflow)
    • Minor
    • Resolution: Unresolved
    • 10.4(EOL)
    • None
    • Tests
    • None

    Description

      I just tested Connector/C master branch with 10.4 (both connector and server using openssl 1.1.0c).

      openssl_6975 fails with following error:

      -Ssl_cipher	DHE-RSA-AES256-SHA
      +Ssl_cipher	ECDHE-RSA-AES256-SHA
       SSLv3 ciphers: user requires SSLv3 cipher AES128-SHA
      

      The test fails, since there was no explicit cipher suite specified, but a group of cipher suites, e.g. --ssl-cipher=tlsv1.2

      There is no guarantee, that client and server always agree to use a certain cipher suite. Preferred cipher suites changed several times in different openssl versions (e.g.1.1.0 prefers elliptic curves cipher suites) and often client and server might have different configurations and therefore different preferred cipher suites.

      Attachments

        Activity

          People

            Unassigned Unassigned
            georg Georg Richter
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.