Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-29811

server advertises ssl even if it's unusable

    XMLWordPrintable

Details

    Description

      if the server is started with --ssl but without properly configured certificates, it will advertise the ssl support in the handshake, but will not actually be able to use it. so a client with --ssl will fail to connect with the ssl error (e.g. "sslv3 alert handshake failure" in OpenSSL).

      I think the server should not start if it was requested to use ssl, but it cannot actually do it.

      Attachments

        1. config-file.cnf
          1 kB
          Ulf Hofemeier
        2. docker-compose.yml
          0.6 kB
          Ulf Hofemeier

        Issue Links

          Activity

            People

              wlad Vladislav Vaintroub
              serg Sergei Golubchik
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.