[MDEV-21881] Feedback plugin still uses a lot of TLS 1.0/1.1 Created: 2020-03-06 Updated: 2020-09-28 |
|
| Status: | Open |
| Project: | MariaDB Server |
| Component/s: | None |
| Affects Version/s: | None |
| Fix Version/s: | None |
| Type: | Bug | Priority: | Major |
| Reporter: | Otto Kekäläinen | Assignee: | Unassigned |
| Resolution: | Unresolved | Votes: | 0 |
| Labels: | None | ||
| Description |
|
The feedback plugin site https://mariadb.com/kb/en/feedback-plugin/ still gets a lot of TLS 1.0 and TLS 1.1 traffic, even though those protocols are soon to be deprecated globally. Are the clients just really old or is MariaDB still shipping TLS 1.0/1.1 in new installations? We should ensure that at least all new MariaDB installations use TLS 1.2+ for submission of feedback data.
|
| Comments |
| Comment by Daniel Black [ 2020-06-19 ] | |||||||
|
related: MDEV-22658 10.1, 10.2,10.3 with bundled SSL is limited to TLS-1.1 10.1 cannot build with newer system ssl versions so is limited to bundled 10.4+ bundled ssl (wolfssl defaults to TLS-1.2) and TLS-1.3 once I finish | |||||||
| Comment by Otto Kekäläinen [ 2020-09-28 ] | |||||||
|
MariaDB 10.5 as installed form MariaDB.org can do TLSv1.3:
|