Uploaded image for project: 'MariaDB Connector/ODBC'
  1. MariaDB Connector/ODBC
  2. ODBC-240

SSLFP and SSLFPLIST parameters appear unused

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 3.1.0, 3.0.8
    • Fix Version/s: 3.1.4
    • Component/s: General
    • Labels:
      None

      Description

      MariaDB Connector/ODBC allows users to set SSLFP and SSLFPLIST, but as far as I can tell, it doesn't do anything with the values.

      Shouldn't it call mysql_optionsv in the MADB_DbcConnectDB function and use the value(s) to set MARIADB_OPT_TLS_PEER_FP and/or MARIADB_OPT_TLS_PEER_FP_LIST? I don't see it doing that here:

      https://github.com/MariaDB/mariadb-connector-odbc/blob/3.1.0/ma_connection.c#L579

      It looks like MARIADB_OPT_TLS_PEER_FP and MARIADB_OPT_TLS_PEER_FP_LIST are preferred over MARIADB_OPT_SSL_FP and MARIADB_OPT_SSL_FP_LIST, because the latter are deprecated. See here:

      https://github.com/MariaDB/mariadb-connector-c/blob/v3.0.9/include/mysql.h#L214

      https://mariadb.com/kb/en/library/mysql_optionsv/

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Lawrin Lawrin Novitsky
                Reporter:
                GeoffMontee Geoff Montee
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: