[MDEV-10726] Official Windows builds do not support TLS 1.2 Created: 2016-09-02  Updated: 2019-05-31  Resolved: 2019-05-31

Status: Closed
Project: MariaDB Server
Component/s: SSL
Fix Version/s: 10.4.6

Type: Task Priority: Major
Reporter: Daniel Kessel Assignee: Vladislav Vaintroub
Resolution: Fixed Votes: 0
Labels: None

Issue Links:
PartOf
is part of MDEV-10953 Replace yassl Closed
Relates
relates to MDEV-16475 Remove yassl Closed
relates to MDEV-18331 Use Libressl instead of yassl for WIT... Closed
relates to MDEV-18531 Use WolfSSL instead of YaSSL as "bund... Closed

 Description   

Windows builds of the MariaDB Server should support TLS 1.2.

However, those builds are done against YaSSL, and the Connector/J page states this:
"YaSSL doesn't support TLSv1.2, so if MariaDB server is build from sources with YaSSL, only TLSv1 and TLSv1.1 will be available, even for versions > 10.0.15"
(Source: https://mariadb.com/kb/en/mariadb/mariadb-connector-j-152-release-notes/)

We only deploy on Windows servers currently, so using TLS 1.2 is not possible for us using official builds.

 Comments   
Comment by Vladislav Vaintroub [ 2016-09-13 ]

This was never possible, and currently (and for long time already) all Windows builds are using yassl. The only way to get TLS 1.2 if one is so inclined, is getting rid of yassl replacing with something else. It will probably not happen until after 10.2

Comment by Vladislav Vaintroub [ 2019-05-31 ]

Fixed since WolfSSL has now replaced YASSL

Generated at Thu Feb 08 07:44:27 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.