[MDEV-11272] Full processlist should show SSL type Created: 2016-11-11  Updated: 2017-11-30  Resolved: 2017-05-26

Status: Closed
Project: MariaDB Server
Component/s: SSL
Fix Version/s: N/A

Type: Task Priority: Major
Reporter: Michaël de groot Assignee: Unassigned
Resolution: Won't Fix Votes: 0
Labels: None


 Description   

Hi,

It would be very useful if the server shows in SHOW FULL PROCESSLIST output, and in the information_schema tables whether the client uses SSL.

At the moment, on Windows, it's slightly hard to know if the client is SSL or not.

Thanks,
Michaël

 Comments   
Comment by Sergei Golubchik [ 2017-05-26 ]

as far as I understand, performance schema will show that

Comment by Geoff Montee (Inactive) [ 2017-11-30 ]

Hi serg,

Are you sure that performance_schema makes this information available? Out of all of the performance_schema tables, I would expect this information to be available in session_connect_attrs, but this information does not seem to be there. e.g.:

$ mysql -u root -h 127.0.0.1 --ssl-cert=/etc/my.cnf.d/certificates/client-cert.pem --ssl-key=/etc/my.cnf.d/certificates/client-key.pem --ssl-ca=/etc/my.cnf.d/certificates/ca.pem --ssl
 
Welcome to the MariaDB monitor.  Commands end with ; or \g.
 
Your MariaDB connection id is 10
 
Server version: 10.1.26-MariaDB MariaDB Server
 
 
 
Copyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.
 
 
 
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
 
 
 
MariaDB [(none)]> SHOW GLOBAL STATUS LIKE 'Ssl_cipher';
 
+---------------+---------------------------+
 
| Variable_name | Value                     |
 
+---------------+---------------------------+
 
| Ssl_cipher    | DHE-RSA-AES256-GCM-SHA384 |
 
+---------------+---------------------------+
 
1 row in set (0.00 sec)
 
 
 
MariaDB [(none)]> SELECT * FROM performance_schema.session_connect_attrs;
 
+----------------+-----------------+------------+------------------+
 
| PROCESSLIST_ID | ATTR_NAME       | ATTR_VALUE | ORDINAL_POSITION |
 
+----------------+-----------------+------------+------------------+
 
|             10 | _os             | Linux      |                0 |
 
|             10 | _client_name    | libmysql   |                1 |
 
|             10 | _pid            | 2077       |                2 |
 
|             10 | _client_version | 10.1.26    |                3 |
 
|             10 | _platform       | x86_64     |                4 |
 
|             10 | program_name    | mysql      |                5 |
 
+----------------+-----------------+------------+------------------+
 
6 rows in set (0.00 sec)

Is SSL information available in some other performance_schema table?

Comment by Sergei Golubchik [ 2017-11-30 ]

I think I meant that after we'll merge performance schema from 5.7, we will have this information.
Alas, for 10.3 we didn't.

Generated at Thu Feb 08 07:48:40 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.