I have noticed that my new machines using
mariadb from 11.4.4-MariaDB, client 15.2 for Linux (aarch64) using readline 5.1
|
fail while trying to connect to a Google Cloud MySQL 8.0 SSL enabled server
mariadb Ver 15.1 Distrib 10.11.10-MariaDB, for Linux (aarch64) using readline 5.1
|
was working fine. This can be easily tested with `alpine:latest` and the previous `alpine:3.20.3` or an `ubuntu:latest` and `ubuntu:latest` with mariadb repositories
Google configures the host of the database as `localhost`
my.cnf (paths are generated dynamically and not relative)
[client]
|
password=xxx
|
ssl-ca=/tmp/tmp.bllnig
|
ssl-cert=/tmp/tmp.mCJAkg
|
ssl-key=/tmp/tmp.Pdepkg
|
SSL on server
+-------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
|
| Variable_name | Value |
|
+-------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
|
| force_ssl_for_tcp | ANY |
|
| have_openssl | YES |
|
| have_ssl | YES |
|
| ssl_ca | /mysql/datadir/client_ca_cert.pem |
|
| ssl_capath | |
|
| ssl_cert | /mysql/datadir/server_cert.pem |
|
| ssl_cipher | ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES128-SHA:AES256-SHA |
|
| ssl_crl | |
|
| ssl_crlpath | |
|
| ssl_fips_mode | ON |
|
| ssl_key | /mysql/datadir/server_pkey.pem |
|
|
|
Client sertificate
Certificate:
|
Data:
|
Version: 3 (0x2)
|
Serial Number:xxx (0xxxx)
|
Signature Algorithm: sha256WithRSAEncryption
|
Issuer: dnQualifier=xxx CN=Google Cloud SQL Client CA staging, O=Google, Inc, C=US
|
Validity
|
Not Before: Oct 1 08:26:05 2024 GMT
|
Not After : Sep 29 08:27:05 2034 GMT
|
Subject: CN=NAME_OF_CERT, O=Google, Inc, C=US
|
Subject Public Key Info:
|
Public Key Algorithm: rsaEncryption
|
Public-Key: (2048 bit)
|
Modulus:
|
xxx
|
|
Exponent: 65537 (0x10001)
|
X509v3 extensions:
|
X509v3 Basic Constraints:
|
CA:FALSE
|
X509v3 Subject Alternative Name:
|
email:email-of-user-logged-in-to-gcp@domain.com
|
Signature Algorithm: sha256WithRSAEncryption
|
Signature Value:
|
xxx
|
SSL
/tmp # openssl s_client -connect XXX.XXX.XXX.XXX:3306 -showcerts
|
Connecting to XXX.XXX.XXX.XXX
|
CONNECTED(00000003)
|
284B18EC717B0000:error:0A00010B:SSL routines:tls_validate_record_header:wrong version number:ssl/record/methods/tlsany_meth.c:80:
|
---
|
no peer certificate available
|
---
|
No client certificate CA names sent
|
---
|
SSL handshake has read 5 bytes and written 299 bytes
|
Verification: OK
|
---
|
New, (NONE), Cipher is (NONE)
|
This TLS version forbids renegotiation.
|
No ALPN negotiated
|
Early data was not sent
|
Verify return code: 0 (ok)
|
---
|
{"report":{"fcp":986.5,"ttfb":337.5,"pageVisibility":"visible","entityId":132212,"key":"jira.project.issue.view-issue","isInitial":true,"threshold":1000,"elementTimings":{},"userDeviceMemory":8,"userDeviceProcessors":64,"apdex":0.5,"journeyId":"5b8ab083-6ec6-47f1-ace6-75a0eab6c42b","navigationType":0,"readyForUser":1075.6999998092651,"redirectCount":0,"resourceLoadedEnd":1143.6000003814697,"resourceLoadedStart":344,"resourceTiming":[{"duration":73.90000057220459,"initiatorType":"link","name":"https://jira.mariadb.org/s/2c21342762a6a02add1c328bed317ffd-CDN/lu2cib/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/css/_super/batch.css","startTime":344,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":344,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":417.9000005722046,"responseStart":0,"secureConnectionStart":0},{"duration":74.19999980926514,"initiatorType":"link","name":"https://jira.mariadb.org/s/7ebd35e77e471bc30ff0eba799ebc151-CDN/lu2cib/820016/12ta74/494e4c556ecbb29f90a3d3b4f09cb99c/_/download/contextbatch/css/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true&whisper-enabled=true","startTime":344.30000019073486,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":344.30000019073486,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":418.5,"responseStart":0,"secureConnectionStart":0},{"duration":130.39999961853027,"initiatorType":"script","name":"https://jira.mariadb.org/s/0917945aaa57108d00c5076fea35e069-CDN/lu2cib/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/js/_super/batch.js?locale=en","startTime":344.4000005722046,"connectEnd":344.4000005722046,"connectStart":344.4000005722046,"domainLookupEnd":344.4000005722046,"domainLookupStart":344.4000005722046,"fetchStart":344.4000005722046,"redirectEnd":0,"redirectStart":0,"requestStart":344.4000005722046,"responseEnd":474.80000019073486,"responseStart":474.80000019073486,"secureConnectionStart":344.4000005722046},{"duration":234,"initiatorType":"script","name":"https://jira.mariadb.org/s/2d8175ec2fa4c816e8023260bd8c1786-CDN/lu2cib/820016/12ta74/494e4c556ecbb29f90a3d3b4f09cb99c/_/download/contextbatch/js/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true&whisper-enabled=true","startTime":344.69999980926514,"connectEnd":344.69999980926514,"connectStart":344.69999980926514,"domainLookupEnd":344.69999980926514,"domainLookupStart":344.69999980926514,"fetchStart":344.69999980926514,"redirectEnd":0,"redirectStart":0,"requestStart":344.69999980926514,"responseEnd":578.6999998092651,"responseStart":578.6999998092651,"secureConnectionStart":344.69999980926514},{"duration":237.80000019073486,"initiatorType":"script","name":"https://jira.mariadb.org/s/a9324d6758d385eb45c462685ad88f1d-CDN/lu2cib/820016/12ta74/c92c0caa9a024ae85b0ebdbed7fb4bd7/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en","startTime":345,"connectEnd":345,"connectStart":345,"domainLookupEnd":345,"domainLookupStart":345,"fetchStart":345,"redirectEnd":0,"redirectStart":0,"requestStart":345,"responseEnd":582.8000001907349,"responseStart":582.8000001907349,"secureConnectionStart":345},{"duration":238.5,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":345.19999980926514,"connectEnd":345.19999980926514,"connectStart":345.19999980926514,"domainLookupEnd":345.19999980926514,"domainLookupStart":345.19999980926514,"fetchStart":345.19999980926514,"redirectEnd":0,"redirectStart":0,"requestStart":345.19999980926514,"responseEnd":583.6999998092651,"responseStart":583.6999998092651,"secureConnectionStart":345.19999980926514},{"duration":238.80000019073486,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":345.30000019073486,"connectEnd":345.30000019073486,"connectStart":345.30000019073486,"domainLookupEnd":345.30000019073486,"domainLookupStart":345.30000019073486,"fetchStart":345.30000019073486,"redirectEnd":0,"redirectStart":0,"requestStart":345.30000019073486,"responseEnd":584.1000003814697,"responseStart":584.1000003814697,"secureConnectionStart":345.30000019073486},{"duration":274.80000019073486,"initiatorType":"link","name":"https://jira.mariadb.org/s/b04b06a02d1959df322d9cded3aeecc1-CDN/lu2cib/820016/12ta74/a2ff6aa845ffc9a1d22fe23d9ee791fc/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":345.5,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":345.5,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":620.3000001907349,"responseStart":0,"secureConnectionStart":0},{"duration":239,"initiatorType":"script","name":"https://jira.mariadb.org/rest/api/1.0/shortcuts/820016/47140b6e0a9bc2e4913da06536125810/shortcuts.js?context=issuenavigation&context=issueaction","startTime":345.6000003814697,"connectEnd":345.6000003814697,"connectStart":345.6000003814697,"domainLookupEnd":345.6000003814697,"domainLookupStart":345.6000003814697,"fetchStart":345.6000003814697,"redirectEnd":0,"redirectStart":0,"requestStart":345.6000003814697,"responseEnd":584.6000003814697,"responseStart":584.5,"secureConnectionStart":345.6000003814697},{"duration":274.5,"initiatorType":"link","name":"https://jira.mariadb.org/s/3ac36323ba5e4eb0af2aa7ac7211b4bb-CDN/lu2cib/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.css?jira.create.linked.issue=true","startTime":345.80000019073486,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":345.80000019073486,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":620.3000001907349,"responseStart":0,"secureConnectionStart":0},{"duration":239.10000038146973,"initiatorType":"script","name":"https://jira.mariadb.org/s/5d5e8fe91fbc506585e83ea3b62ccc4b-CDN/lu2cib/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.js?jira.create.linked.issue=true&locale=en","startTime":346,"connectEnd":346,"connectStart":346,"domainLookupEnd":346,"domainLookupStart":346,"fetchStart":346,"redirectEnd":0,"redirectStart":0,"requestStart":346,"responseEnd":585.1000003814697,"responseStart":585.1000003814697,"secureConnectionStart":346},{"duration":656.3000001907349,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":346.80000019073486,"connectEnd":346.80000019073486,"connectStart":346.80000019073486,"domainLookupEnd":346.80000019073486,"domainLookupStart":346.80000019073486,"fetchStart":346.80000019073486,"redirectEnd":0,"redirectStart":0,"requestStart":346.80000019073486,"responseEnd":1003.1000003814697,"responseStart":1003.1000003814697,"secureConnectionStart":346.80000019073486},{"duration":658.1000003814697,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-init/jira.webresources:bigpipe-init.js","startTime":346.80000019073486,"connectEnd":346.80000019073486,"connectStart":346.80000019073486,"domainLookupEnd":346.80000019073486,"domainLookupStart":346.80000019073486,"fetchStart":346.80000019073486,"redirectEnd":0,"redirectStart":0,"requestStart":346.80000019073486,"responseEnd":1004.9000005722046,"responseStart":1004.9000005722046,"secureConnectionStart":346.80000019073486},{"duration":190.80000019073486,"initiatorType":"xmlhttprequest","name":"https://jira.mariadb.org/rest/webResources/1.0/resources","startTime":632.1000003814697,"connectEnd":632.1000003814697,"connectStart":632.1000003814697,"domainLookupEnd":632.1000003814697,"domainLookupStart":632.1000003814697,"fetchStart":632.1000003814697,"redirectEnd":0,"redirectStart":0,"requestStart":632.1000003814697,"responseEnd":822.9000005722046,"responseStart":822.9000005722046,"secureConnectionStart":632.1000003814697},{"duration":219.10000038146973,"initiatorType":"link","name":"https://jira.mariadb.org/s/d5715adaadd168a9002b108b2b039b50-CDN/lu2cib/820016/12ta74/be4b45e9cec53099498fa61c8b7acba4/_/download/contextbatch/css/jira.project.sidebar,-_super,-project.issue.navigator,-jira.general,-jira.browse.project,-jira.view.issue,-jira.global,-atl.general,-com.atlassian.jira.projects.sidebar.init/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true&whisper-enabled=true","startTime":890.3000001907349,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":890.3000001907349,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":1109.4000005722046,"responseStart":0,"secureConnectionStart":0},{"duration":218.9000005722046,"initiatorType":"link","name":"https://jira.mariadb.org/s/50bc9be5bfead1a25e72c1a9338c94f6-CDN/lu2cib/820016/12ta74/e108c7645258ccb43280ed3404e3e949/_/download/contextbatch/css/com.atlassian.jira.plugins.jira-development-integration-plugin:0,-_super,-jira.view.issue,-jira.global,-jira.general,-jira.browse.project,-project.issue.navigator,-atl.general/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true&whisper-enabled=true","startTime":890.6999998092651,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":890.6999998092651,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":1109.6000003814697,"responseStart":0,"secureConnectionStart":0},{"duration":243.19999980926514,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/e65b778d185daf5aee24936755b43da6/_/download/contextbatch/js/browser-metrics-plugin.contrib,-_super,-project.issue.navigator,-jira.view.issue,-atl.general/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true&whisper-enabled=true","startTime":891.6000003814697,"connectEnd":891.6000003814697,"connectStart":891.6000003814697,"domainLookupEnd":891.6000003814697,"domainLookupStart":891.6000003814697,"fetchStart":891.6000003814697,"redirectEnd":0,"redirectStart":0,"requestStart":891.6000003814697,"responseEnd":1134.8000001907349,"responseStart":1134.8000001907349,"secureConnectionStart":891.6000003814697},{"duration":219,"initiatorType":"script","name":"https://www.google-analytics.com/analytics.js","startTime":980.3000001907349,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":980.3000001907349,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":1199.3000001907349,"responseStart":0,"secureConnectionStart":0},{"duration":251.60000038146973,"initiatorType":"script","name":"https://jira.mariadb.org/s/097ae97cb8fbec7d6ea4bbb1f26955b9-CDN/lu2cib/820016/12ta74/be4b45e9cec53099498fa61c8b7acba4/_/download/contextbatch/js/jira.project.sidebar,-_super,-project.issue.navigator,-jira.general,-jira.browse.project,-jira.view.issue,-jira.global,-atl.general,-com.atlassian.jira.projects.sidebar.init/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true&whisper-enabled=true","startTime":892,"connectEnd":892,"connectStart":892,"domainLookupEnd":892,"domainLookupStart":892,"fetchStart":892,"redirectEnd":0,"redirectStart":0,"requestStart":892,"responseEnd":1143.6000003814697,"responseStart":1143.6000003814697,"secureConnectionStart":892},{"duration":252.5999994277954,"initiatorType":"script","name":"https://jira.mariadb.org/s/e0bf5781d46ea69fb123572974cf39de-CDN/lu2cib/820016/12ta74/e108c7645258ccb43280ed3404e3e949/_/download/contextbatch/js/com.atlassian.jira.plugins.jira-development-integration-plugin:0,-_super,-jira.view.issue,-jira.global,-jira.general,-jira.browse.project,-project.issue.navigator,-atl.general/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true&whisper-enabled=true","startTime":892.4000005722046,"connectEnd":892.4000005722046,"connectStart":892.4000005722046,"domainLookupEnd":892.4000005722046,"domainLookupStart":892.4000005722046,"fetchStart":892.4000005722046,"redirectEnd":0,"redirectStart":0,"requestStart":892.4000005722046,"responseEnd":1145,"responseStart":1145,"secureConnectionStart":892.4000005722046}],"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":176,"responseStart":337,"responseEnd":340,"domLoading":341,"domInteractive":1145,"domContentLoadedEventStart":1145,"domContentLoadedEventEnd":1192,"domComplete":1573,"loadEventStart":1573,"loadEventEnd":1573,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[{"name":"bigPipe.sidebar-id.start","time":1125.8000001907349},{"name":"bigPipe.sidebar-id.end","time":1126.6000003814697},{"name":"bigPipe.activity-panel-pipe-id.start","time":1126.6999998092651},{"name":"bigPipe.activity-panel-pipe-id.end","time":1127.5},{"name":"activityTabFullyLoaded","time":1212.1000003814697}],"measures":[],"correlationId":"cd1f8314b7e956","effectiveType":"4g","downlink":10,"rtt":0,"serverDuration":94,"dbReadsTimeInMs":11,"dbConnsTimeInMs":20,"applicationHash":"9d11dbea5f4be3d4cc21f03a88dd11d8c8687422","experiments":[]}}
Bug
Major
Since 11.3 --ssl-verify-server-cert on the client is enabled by default.
To get the same behavior as in 10.11, use --disable-ssl-verify-server-cert