[#MDEV-26049] Status variable ssl_cipher_list requires TLS connection, but lists built in cipher suites

The command show status like 'ssl_cipher_list' returns an empty result set if no secure (TLS) connection was established between client and server.

When establishing a secure connection the same command lists the builtin cipher-suites for OpenSSL including cipher suites which can't be used for a connection.
WolfSSL displays only one cipher suite, which is the cipher suite for the current connection.

1. Always display built in cipher suites if MariaDB was build with TLS support
2. use Wolfssl_get_ciphers() api function instead of current implementation
3. Provide an additional status variable 'ssl_shared_ciphers' which list the allowed cipher suite for the given connection

$ ./mysql -e"show status like 'ssl_cipher_list'\G";

*************************** 1. row ***************************

Variable_name: Ssl_cipher_list

        Value: TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:DHE-RSA-AES256-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:RSA-PSK-AES256-GCM-SHA384:DHE-PSK-AES256-GCM-SHA384:RSA-PSK-CHACHA20-POLY1305:DHE-PSK-CHACHA20-POLY1305:ECDHE-PSK-CHACHA20-POLY1305:AES256-GCM-SHA384:PSK-AES256-GCM-SHA384:PSK-CHACHA20-POLY1305:RSA-PSK-AES128-GCM-SHA256:DHE-PSK-AES128-GCM-SHA256:AES128-GCM-SHA256:PSK-AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:ECDHE-PSK-AES256-CBC-SHA384:ECDHE-PSK-AES256-CBC-SHA:SRP-RSA-AES-256-CBC-SHA:SRP-AES-256-CBC-SHA:RSA-PSK-AES256-CBC-SHA384:DHE-PSK-AES256-CBC-SHA384:RSA-PSK-AES256-CBC-SHA:DHE-PSK-AES256-CBC-SHA:AES256-SHA:PSK-AES256-CBC-SHA384:PSK-AES256-CBC-SHA:ECDHE-PSK-AES128-CBC-SHA256:ECDHE-PSK-AES128-CBC-SHA:SRP-RSA-AES-128-CBC-SHA:SRP-AES-128-CBC-SHA:RSA-PSK-AES128-CBC-SHA256:DHE-PSK-AES128-CBC-SHA256:RSA-PSK-AES128-CBC-SHA:DHE-PSK-AES128-CBC-SHA:AES128-SHA:PSK-AES128-CBC-SHA256:PSK-AES128-CBC-SHA

$ ./mysql -e"show status like 'ssl_shared_ciphers'\G" --tls_version=TLSv1.1 --ssl

*************************** 1. row ***************************

Variable_name: Ssl_shared_ciphers

        Value: ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:AES256-SHA:AES128-SHA

$ ./mysql -e"show status like 'ssl_shared_ciphers'\G" --tls_version=TLSv1.3 --ssl

*************************** 1. row ***************************

Variable_name: Ssl_shared_ciphers

        Value: TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256

[MDEV-26049] Status variable ssl_cipher_list requires TLS connection, but lists built in cipher suites Created: 2021-06-30 Updated: 2021-06-30
Status:	Open
Project:	MariaDB Server
Component/s:	SSL
Affects Version/s:	10.6
Fix Version/s:	10.6

[MDEV-26049] Status variable ssl_cipher_list requires TLS connection, but lists built in cipher suites Created: 2021-06-30 Updated: 2021-06-30