Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-32123

require_secure_transport doesn't allow TCP connections

Details

    • Bug
    • Status: Closed (View Workflow)
    • Critical
    • Resolution: Fixed
    • 11.2(EOL)
    • 11.2.2
    • SSL
    • None

    Description

      require_secure_transport doesn't allow TCP connections anymore. This was broken in MDEV-30178 that moved the check for SSL to be done before the SSL layering is done.

      And that was possible to happen without breaking any tests, because there were no tests whether require_secure_transport allows SSL or not.

      Attachments

        Issue Links

          is caused by

          Task - A task that needs to be done. MDEV-13362 implement –require_secure_transport option like in MySQL 5.7

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MDEV-30178 Error message when 'require_secure_transport' is enabled should be more explict

          • Trivial - Cosmetic problem like misspelt words or misaligned text.
          • Closed

          Activity

            Ascending order - Click to sort in descending order
            serg Sergei Golubchik created issue -
            serg Sergei Golubchik made changes -
            Field Original Value New Value
            serg Sergei Golubchik made changes -
            serg Sergei Golubchik added a comment -

            The commit, besides the fix itself, must include:

            • a test for --require-secure-transport=1 (yes, there is no test for that)
            • a test for SSL under require_secure_transport
            serg Sergei Golubchik added a comment - The commit, besides the fix itself, must include: a test for --require-secure-transport=1 (yes, there is no test for that) a test for SSL under require_secure_transport
            serg Sergei Golubchik made changes -
            Priority Major [ 3 ] Critical [ 2 ]
            serg Sergei Golubchik made changes -
            Assignee Dmitry Shulga [ JIRAUSER47315 ]
            serg Sergei Golubchik made changes -
            Status Open [ 1 ] Confirmed [ 10101 ]
            serg Sergei Golubchik made changes -
            Description {{require_secure_transport}} doesn't allow TCP connections anymore. This was broken in MDEV-30178 that moved the check for SSL to be done *before* the SSL layering is done.

            And that was possible to happen without breaking any tests, because there were no tests whether {{require_secure_transport}} allows SSL or not.
            		{{require_secure_transport}} doesn't allow TCP connections anymore. This was broken in MDEV-30178 that moved the check for SSL to be done *before* the SSL layering is done.

            And *that* was possible to happen without breaking any tests, because there were no tests whether {{require_secure_transport}} allows SSL or not.
            julien.fritsch Julien Fritsch made changes -
            ralf.gebhardt Ralf Gebhardt made changes -
            shulga Dmitry Shulga made changes -
            Status Confirmed [ 10101 ] In Progress [ 3 ]
            shulga Dmitry Shulga made changes -
            Assignee Dmitry Shulga [ JIRAUSER47315 ] Oleksandr Byelkin [ sanja ]
            Status In Progress [ 3 ] In Review [ 10002 ]
            sanja Oleksandr Byelkin made changes -
            Assignee Oleksandr Byelkin [ sanja ] Sergei Golubchik [ serg ]
            serg Sergei Golubchik made changes -
            Assignee Sergei Golubchik [ serg ] Dmitry Shulga [ JIRAUSER47315 ]
            Status In Review [ 10002 ] Stalled [ 10000 ]
            shulga Dmitry Shulga made changes -
            Status Stalled [ 10000 ] In Progress [ 3 ]
            shulga Dmitry Shulga made changes -
            Assignee Dmitry Shulga [ JIRAUSER47315 ] Sergei Golubchik [ serg ]
            Status In Progress [ 3 ] In Review [ 10002 ]
            serg Sergei Golubchik made changes -
            Assignee Sergei Golubchik [ serg ] Dmitry Shulga [ JIRAUSER47315 ]
            Status In Review [ 10002 ] Stalled [ 10000 ]
            shulga Dmitry Shulga made changes -
            issue.field.resolutiondate 2023-10-11 18:02:54.0 2023-10-11 18:02:53.746
            shulga Dmitry Shulga made changes -
            Fix Version/s 11.2.2 [ 29035 ]
            Fix Version/s 11.2 [ 28603 ]
            Resolution Fixed [ 1 ]
            Status Stalled [ 10000 ] Closed [ 6 ]

            People

              shulga Dmitry Shulga
              serg Sergei Golubchik
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.