Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-25799

tls_version=TLSv1.3 does not work with WolfSSL based server builds

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Duplicate
    • None
    • N/A
    • Server, SSL
    • None

    Description

      I've set up two machines, one named "openssl" with MariaDB installed from our own Ubuntu package repository, so built against OpenSSL, and one named "wolfssl" with MariaDB installed from our generic Linux binary tarball, so built against WolfSSL

      Both servers are set up for SSL/TLS, and are configured to enforce TLSv1.3 with

      tls_version=TLSv1.3
      

      The mysql command line client is able to connect to the OpenSSL based MariaDB server using encryption from both machines just fine.

      Neither client can connect to the WolfSSL based server though.

      The client using OpenSSL reports:

      vagrant@openssl:~$ mysql -u x509 -psecret -h wolfssl --ssl
      ERROR 2026 (HY000): SSL connection error: wrong version number
      

      And the WolfSSL based client basically reports the same, just with different wording:

      vagrant@wolfssl:~$ mysql -u x509 -psecret -h wolfssl --ssl
      ERROR 2026 (HY000): SSL connection error: A packet with illegal or unsupported version was received.
      

      When removing the

      tls_version=TLSv1.3
      

      line from the configuration file, and restarting the MariaDB server using WolfSSL, encrypted connections are possible, but only use TLSv1.2

      When connecting from the WolfSSL based client to the OpenSSL based server, both agree on using TSLv1.3 as the highest mutually supported version though.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              hholzgra Hartmut Holzgraefe
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.