[CONC-241] Schannel doesn't support all CipherSuites Created: 2017-03-07  Updated: 2017-06-23  Resolved: 2017-06-23

Status: Closed
Project: MariaDB Connector/C
Component/s: None
Affects Version/s: 3.0.1
Fix Version/s: 3.0.2

Type: Bug Priority: Major
Reporter: Georg Richter Assignee: Georg Richter
Resolution: Fixed Votes: 1
Labels: None
Environment:

all

Attachments: File CONC-241.patch    
Issue Links:
Blocks
blocks MDEV-10332 Server 10.2: Add support for OpenSSL 1.1 Closed

 Description   

Schannel doesn't support all cipher suites (especially TLS v.1.2) or maps them not correctly to OpenSSL cipher suite names.

Currently the following cipher suites are supported:

  • AES128-SHA
  • AES256-SHA
  • RC4-SHA
  • DES-CBC3-SHA
  • AES128-SHA256
  • DHE-RSA-AES256-GCM-SHA384
  • DHE-RSA-AES128-GCM-SHA256
  • DHE-RSA-AES256-SHA
  • DHE-RSA-AES128-SHA
  • AES128-GCM-SHA256
  • RC4-MD5

Missing cipher suites:

  • EDH-DSS-DES-CBC3-SHA
  • DHE-DSS-AES128-SHA
  • AES256-GCM-SHA384
  • DHE-RSA-AES128-GCM-SHA256
Generated at Thu Feb 08 03:03:54 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.