Details
-
New Feature
-
Status: Closed (View Workflow)
-
Critical
-
Resolution: Fixed
Description
The summary says it all, let's get a secure-by-default connection by enabling --ssl-verify-server-cert by default.
Attachments
Issue Links
- blocks
-
MDEV-28634 Client's --ssl-* options (without --ssl-verify-server-cert) are silently ignored if TLS is not possible
- Closed
- causes
-
MDEV-32473 MariaBackup requires disable-ssl-verify-server-cert
- Closed
-
MDEV-33430 Command line client error ERROR 2026 (HY000): TLS/SSL error: Server certificate validation failed. A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider. Error 0x800B0109(CERT_E_UNTRUSTEDROOT)
- Closed
-
ODBC-421 Certificate verification option should be on by default
- Closed
- is blocked by
-
MDEV-31856 use ephemeral ssl certificates
- Closed
- relates to
-
MDEV-33396 main.user_limits fails sporadically with CERT_E_UNTRUSTED_ROOT
- Closed