Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-27105

--ssl option set as default for mariadb CLI

    XMLWordPrintable

Details

    Description

      Hello

      I'd like to propose that the mariadb CLI has the --ssl option set by default. Although this option alone wont prevent MitM attacks, it raises the security for the CLI by establishing TLS connections, given the database server is able to serve TLS.

      I create this ticket in reference to an off-topic discussion in yonder ticket: MDEV-26997

      Kind regards

      Attachments

        Issue Links

          causes

          Bug - A problem which impairs or prevents the functions of the product. MDEV-29608 Default SSL makes mysqlslap much slower, tests fail with timeout

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-30639 Upgrade to 10.6 and later does not work on Windows

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed
          relates to

          Task - A task that needs to be done. MDEV-28634 Client's --ssl-* options (without --ssl-verify-server-cert) are silently ignored if TLS is not possible

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed
          split from

          Bug - A problem which impairs or prevents the functions of the product. MDEV-26997 Wrong ssl-ca breaks TLS without throwing an error

          • Major - Major loss of function.
          • Closed

          Activity

            People

              serg Sergei Golubchik
              ti0Bee1a Chu3Shah
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.