Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-29811

server advertises ssl even if it's unusable

Details

    Description

      if the server is started with --ssl but without properly configured certificates, it will advertise the ssl support in the handshake, but will not actually be able to use it. so a client with --ssl will fail to connect with the ssl error (e.g. "sslv3 alert handshake failure" in OpenSSL).

      I think the server should not start if it was requested to use ssl, but it cannot actually do it.

      Attachments

        Issue Links

          causes

          Bug - A problem which impairs or prevents the functions of the product. MDEV-30270 ssl_cipher on Non-SSL system results in confusing SSL error

          • Major - Major loss of function.
          • Open

          Bug - A problem which impairs or prevents the functions of the product. MDEV-30818 invalid ssl prevents bootstrap

          • Major - Major loss of function.
          • Closed

          Activity

            Transition Time In Source Status Execution Times
            Vladislav Vaintroub made transition -
            Open Confirmed
            		6d 20h 30m 1
            Vladislav Vaintroub made transition -
            Confirmed In Review
            		16s 1
            Oleksandr Byelkin made transition -
            In Review Stalled
            		1d 1h 50m 1
            Vladislav Vaintroub made transition -
            Stalled Closed
            		25m 40s 1

            People

              wlad Vladislav Vaintroub
              serg Sergei Golubchik
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.