[MDEV-8970]  Add support for for TLSv1.1 and TLSv1.2 Created: 2015-10-20  Updated: 2019-05-21  Resolved: 2015-12-08

Status: Closed
Project: MariaDB Server
Component/s: SSL
Fix Version/s: 5.5.41, 10.0.15, 10.1.4

Type: Task Priority: Critical
Reporter: Sergei Golubchik Assignee: Sergei Golubchik
Resolution: Duplicate Votes: 0
Labels: upstream

Issue Links:
Duplicate
is duplicated by MDEV-6975 Implement TLS protocol Closed
Relates
relates to MDEV-19542 Disable SSLv3 and TLSv1.0 Closed

 Description   

TLSv1.0 is old and isn't considered very secure.
For example, for PCI DSS its usage is deprecated and it should not be used at all after June 30 2016 (link). Browsers might (that link above says "will") follow soon.

MariaDB should support TLSv1.1 and TLSV1.2 as more secure alternatives to TLSv1.0

 Comments   
Comment by Sergei Golubchik [ 2015-12-08 ]

As far as I can see it was fixed in mariadb-5.5.41 within the scope of MDEV-6975.

Generated at Thu Feb 08 07:31:09 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.