Uploaded image for project: 'MariaDB MaxScale'
  1. MariaDB MaxScale
  2. MXS-2857

ssl_verify_peer_certificate should not be on by default

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.3.16, 2.4.6
    • Fix Version/s: 2.3.17, 2.4.7, 2.5.0
    • Component/s: Core
    • Labels:
      None

      Description

      The fix to ssl_verify_peer_certificate not requiring clients to present a certificate changed the default behavior. The old behavior was very similar to ssl_verify_peer_certificate=false so the default should be changed to match that. The fact that presented certificates are no longer verified is not a concern if certificates weren't required in the first place.

        Attachments

          Activity

            People

            Assignee:
            markus makela markus makela
            Reporter:
            markus makela markus makela
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: