Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-77083

not being able to use TLS in perl-DBD-mysql

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • rhel-9.7
    • rhel-9.5
    • perl-DBD-MySQL
    • perl-DBD-MySQL-4.053-1.el9
    • No
    • Moderate
    • rhel-stacks-services-scripting
    • ssg_core_services
    • 15
    • 17
    • 3
    • False
    • False
    • Hide

      None

      Show
      None
    • Yes
    • None
    • Bug Fix
    • Hide
      .The `DBD::MySQL` driver no longer fails to establish TLS-encrypted connections to MySQL 8 servers that have `caching_sha2_password` enabled

      In previous releases, the `perl-DBD-MySQL` package was incorrectly linked against the `libmariadb` library. Consequently, Perl applications failed to establish a connection if all of the following conditions were met:

      * The application connected to a MySQL 8 server.
      * The `caching_sha2_password` option was enabled in the MySQL server configuration.
      * The connection used the `DBI->connect with mysql_ssl=1` option.

      In this update, the driver is linked against `libmysql-client`. As a result, Perl applications no longer fail to establish TLS-encrypted connections in the mentioned scenario.
      Show
      .The `DBD::MySQL` driver no longer fails to establish TLS-encrypted connections to MySQL 8 servers that have `caching_sha2_password` enabled In previous releases, the `perl-DBD-MySQL` package was incorrectly linked against the `libmariadb` library. Consequently, Perl applications failed to establish a connection if all of the following conditions were met: * The application connected to a MySQL 8 server. * The `caching_sha2_password` option was enabled in the MySQL server configuration. * The connection used the `DBI->connect with mysql_ssl=1` option. In this update, the driver is linked against `libmysql-client`. As a result, Perl applications no longer fail to establish TLS-encrypted connections in the mentioned scenario.
    • Done
    • Unspecified
    • Required
    • Not Required
    • x86_64
    • None

      What were you trying to do that didn't work?

      Perl script using DBI  cannot connect to MySQL 8 databases

      What is the impact of this issue to you?

      Unable to use MySQL 8 databases

      Please provide the package NVR for which the bug is seen:

      How reproducible is this bug?:

      Always

      Steps to reproduce

      1. Use Perl script with DBI->connect option mysql_ssl=1 against MySQL 8 database with caching_sha2_password

      Expected results

      Connect to database

      Actual results

      Fails with "failed: SSL connection error: Enforcing SSL encryption is not supported"

      Very likely related to this: https://github.com/mariadb-corporation/mariadb-connector-c/pull/219

      perl-DBD-MySQL-4.050-13.el9.x86_64 links with libmariadb which is likely the cause of failure.

      Possibly it would be better to build perl-DBD-MySQL against MySQL 8 libaries instead of MariaDB?

       

              jplesnik@redhat.com Jitka Plesnikova
              uio-ifi Linux Drift
              Martin Kyral
              perl-maint-list perl-maint-list
              Martin Kyral Martin Kyral
              Marc Muehlfeld Marc Muehlfeld
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated: