Details
-
Task
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Won't Fix
-
None
Description
Description
|
===========
|
Bundled openSSL (openssl-1.0.1u) source codes to compile statically instead of yaSSL,
|
then MySQL server can support TLSv1.2 SSL protocol.
|
For the compatibility, we supply new parameter '--tls-version' to control how to decide the
|
supportable TLS version.
|
If compiled with openSSL, then tls-version default value 'TLSv1, TLSv1.1, TLSv1.2'
|
If compiled with yaSSL, then tls-version default value 'TLSv1, TLSv1.1'
|
Also the added cmake option: DWITH_SSL=openssl means that openssl was built statically.
|
|
Compatibility
|
=============
|
The TLS Protocol version matrix:
|
-----------------------------------------------------------------------
|
Pre_Server Post_yaSSL_Server Post_openSSL_Server
|
Pre_Client TLSv1.0 TLSv1.0 TLSv1.0
|
Post_yaSSL_Client TLSv1.0 TLSv1.1 TLSv1.1
|
Post_openSSL_Client TLSv1.0 TLSv1.1 TLSv1.2
|
-----------------------------------------------------------------------
|
https://github.com/alibaba/AliSQL/commit/a6cc59f86386b444c7f6025458509964c75fb09a
No, we cannot bundle OpenSSL for legal reasons