Details
-
Task
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Won't Fix
-
None
Description
OpenSSL allows applications to load OpenSSL configuration files:
https://www.openssl.org/docs/man1.1.1/man3/OPENSSL_config.html
https://www.openssl.org/docs/man1.1.1/man3/CONF_modules_load_file.html
https://www.openssl.org/docs/man1.1.1/man5/config.html
There could be some benefits to changing MariaDB server, so that it supports the ability to load an OpenSSL configuration file.
For example, since MDEV-14101 is not implemented, the server can't currently be restricted to a specific TLS protocol version. An OpenSSL configuration file would allow users a way to work around that.
It also allows users the ability to configure algorithms used by OpenSSL.
Attachments
Issue Links
- relates to
-
MDEV-14101 Provide option to select TLS protocol version
- Closed
-
MDEV-20170 main.tls_version and main.tls_version1 fail in buildbot on RHEL8
- Closed
-
MDEV-20260 Port the ssl_fips_mode system variable from MySQL
- Closed