Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-19341

Make reloadable TLS system variables dynamic

Details

    Description

      With MDEV-16266 implemented in 10.4, it seems like we have an opportunity to make certain SSL/TLS system variables dynamic.

      It looks like FLUSH SSL uses the following variables to reload the TLS context:

      • ssl_cert
      • ssl_key
      • ssl_ca
      • ssl_capath
      • ssl_crl
      • ssl_crlpath
      • ssl_cipher

      https://github.com/MariaDB/server/blob/mariadb-10.4.4/sql/mysqld.cc#L4735

      https://github.com/MariaDB/server/blob/mariadb-10.4.4//vio/viosslfactories.c#L334

      Can all of these variables be made dynamic in 10.4, as long as the system supports FLUSH SSL?

      Attachments

        Issue Links

          relates to

          Task - A task that needs to be done. MDEV-16266 Ability to Refresh SSL Cert / CRL Without Server Restart

          • Major - Major loss of function.
          • Closed

          Activity

            Ascending order - Click to sort in descending order
            GeoffMontee Geoff Montee (Inactive) created issue -
            GeoffMontee Geoff Montee (Inactive) made changes -
            Field Original Value New Value
            wlad Vladislav Vaintroub made changes -
            Labels need_feedback
            serg Sergei Golubchik made changes -
            Support case ID 27887
            wlad Vladislav Vaintroub made changes -
            Fix Version/s N/A [ 14700 ]
            Fix Version/s 10.4 [ 22408 ]
            Resolution Won't Fix [ 2 ]
            Status Open [ 1 ] Closed [ 6 ]
            serg Sergei Golubchik made changes -
            Workflow MariaDB v3 [ 96373 ] MariaDB v4 [ 133941 ]
            serg Sergei Golubchik made changes -

            People

              wlad Vladislav Vaintroub
              GeoffMontee Geoff Montee (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.