1
0
mirror of https://github.com/mariadb-corporation/mariadb-connector-c.git synced 2025-08-07 02:42:49 +03:00

- OpenSSL security:

report an error if client requires SSL but server doesn't support SSL
(MTM attack)
  new options MARIADB_OPT_SSL_FP for fingerprint of server certificate
              MARIADB_OPT_SSL_FP_LIST for white list of finger prints.
This commit is contained in:
Georg Richter
2015-06-11 13:21:25 +02:00
parent 77251b09ce
commit 28dadb0179
8 changed files with 248 additions and 8 deletions

View File

@@ -209,12 +209,15 @@ extern unsigned int mariadb_deinitialize_ssl;
/* MariaDB specific */
MYSQL_PROGRESS_CALLBACK=5999,
MYSQL_OPT_NONBLOCK,
MYSQL_DATABASE_DRIVER=7000
/* MariaDB Connector/C specific */
MYSQL_DATABASE_DRIVER=7000,
MARIADB_OPT_SSL_FP, /* single finger print for server certificate verification */
MARIADB_OPT_SSL_FP_LIST /* finger print white list for server certificate verification */
};
enum mysql_status { MYSQL_STATUS_READY,
MYSQL_STATUS_GET_RESULT,
MYSQL_STATUS_USE_RESULT,
MYSQL_STATUS_USE_RESULT,
MYSQL_STATUS_QUERY_SENT,
MYSQL_STATUS_SENDING_LOAD_DATA,
MYSQL_STATUS_FETCHING_DATA,