Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-66250

perl-DBD-MariaDB does not honor mariadb_ssl and mariadb_ssl_optional

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: Generate New Ti...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Cannot Reproduce
    • Icon: Undefined Undefined
    • rhel-10.0
    • rhel-10.0
    • perl-DBD-MariaDB
    • None
    • perl-DBD-MariaDB-1.23-10.el10
    • No
    • Moderate
    • rhel-stacks-services-scripting
    • ssg_core_services
    • 23
    • 25
    • 5
    • False
    • False
    • Hide

      None

      Show
      None
    • Yes
    • Red Hat Enterprise Linux
    • None
    • Release Note Not Required
    • All
    • None

      What were you trying to do that didn't work?

      mariadb-connector-c started enforcing SSL conections in the 3.4.0 release, which landed in RHEL in late August. Since then, test using DBD::MariaDB fail upon connecting to the DB with "TLS/SSL error: SSL is required, but the server does not support it".

      perldoc DBD::MariadDB says this:

      mariadb_ssl
      A true value enforces SSL encryption when connecting to the
      MariaDB or MySQL server. A false value (which is default)
      disables SSL encryption with the MariaDB or MySQL server.

      I tried disabling SSL even explicitly setting mariadb_ssl=0, mariadb_ssl_optional=1 and mariadb_ssl_verify_server_cert=0 but none of it helped.

      What is the impact of this issue to you?

      DB server needs to have SSL set up correctly for DBD::MariaDB work at all. Documentation is misleading as the default behaviour is different than described (eventhough it is because change in the underlying mariadb-connector-c) and some of the mariadb_ssl* options do not work as documented.

      Please provide the package NVR for which the bug is seen:

      perl-DBD-MariaDB-1.23-6.el10

      How reproducible is this bug?:

      Always

      Steps to reproduce

      Expected results

      Actual results

              jplesnik@redhat.com Jitka Plesnikova
              mkyral@redhat.com Martin Kyral
              perl-maint-list perl-maint-list
              Martin Kyral Martin Kyral
              Mugdha Soni Mugdha Soni
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: