Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-8939

[PATCH] Disable SSL capabilities for named pipes and shared memory

    XMLWordPrintable

Details

    • Bug
    • Status: Open (View Workflow)
    • Minor
    • Resolution: Unresolved
    • 10.1(EOL)
    • 10.1(EOL)
    • SSL
    • None

    Description

      During handhake (greeting packet) server indicates via CLIENT_SSL capability flag that he supports SSL. On Windows this is correct for socket/tcp connections, but not for named pipe and shared memory:

      C:\Program Files\MariaDB 10.1\bin>mysql -uroot --pipe --ssl
      ERROR 2026 (HY000): SSL connection error: socket layer send error

      Suggested fix:

      --- a/sql/sql_acl.cc
      +++ b/sql/sql_acl.cc
      @@ -11249,7 +11249,9 @@ static bool send_server_handshake_packet(MPVIO_EXT *mpvio,
       
         thd->client_capabilities|= CAN_CLIENT_COMPRESS;
       
      -  if (ssl_acceptor_fd)
      +  if (thd->active_vio->type != VIO_TYPE_NAMEDPIPE &&
      +      thd->active_vio->type != VIO_TYPE_SHARED_MEMORY &&
      +      ssl_acceptor_fd)
         {
           thd->client_capabilities |= CLIENT_SSL;
           thd->client_capabilities |= CLIENT_SSL_VERIFY_SERVER_CERT;

      Attachments

        Activity

          People

            serg Sergei Golubchik
            georg Georg Richter
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.