Uploaded image for project: 'MariaDB Connector/ODBC'
  1. MariaDB Connector/ODBC
  2. ODBC-240

SSLFP and SSLFPLIST parameters appear unused

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 3.1.0, 3.0.8
    • Fix Version/s: 3.1.4
    • Component/s: General
    • Labels:
      None

      Description

      MariaDB Connector/ODBC allows users to set SSLFP and SSLFPLIST, but as far as I can tell, it doesn't do anything with the values.

      Shouldn't it call mysql_optionsv in the MADB_DbcConnectDB function and use the value(s) to set MARIADB_OPT_TLS_PEER_FP and/or MARIADB_OPT_TLS_PEER_FP_LIST? I don't see it doing that here:

      https://github.com/MariaDB/mariadb-connector-odbc/blob/3.1.0/ma_connection.c#L579

      It looks like MARIADB_OPT_TLS_PEER_FP and MARIADB_OPT_TLS_PEER_FP_LIST are preferred over MARIADB_OPT_SSL_FP and MARIADB_OPT_SSL_FP_LIST, because the latter are deprecated. See here:

      https://github.com/MariaDB/mariadb-connector-c/blob/v3.0.9/include/mysql.h#L214

      https://mariadb.com/kb/en/library/mysql_optionsv/

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Lawrin Lawrin Novitsky
              Reporter:
              GeoffMontee Geoff Montee
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: