[MDEV-17900] Status variable ssl_version returns wrong information Created: 2018-12-04  Updated: 2019-01-11

Status: Open
Project: MariaDB Server
Component/s: SSL
Affects Version/s: 10.4
Fix Version/s: 10.4

Type: Bug Priority: Major
Reporter: Georg Richter Assignee: Sergei Golubchik
Resolution: Unresolved Votes: 0
Labels: None


 Description   

When connecting to MariaDB server (build with Yassl) ssl_version always returns "TLSv1"
even if the protocol is "TLSv1.1".

How to repeat:

$ ../client/mysql -uroot -P16000 -h127.0.0.1 --ssl  -e"show status like 'ssl_version'"
 
+---------------+-------+
 
| Variable_name | Value |
 
+---------------+-------+
 
| Ssl_version   | TLSv1 |
 
+---------------+-------+

If you analyze the traffic with wireshark, you can clearly see that client and server agreed on TLSv1.1 and not on TLSv1(.0).

 Comments   
Comment by Elena Stepanova [ 2018-12-07 ]

georg, could you please specify server versions where you observed it?

Comment by Georg Richter [ 2019-01-07 ]

I tested it against 10.4 - so likely all server versions are affected.

Generated at Thu Feb 08 08:39:59 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.