1
0
mirror of https://github.com/MariaDB/server.git synced 2025-11-30 05:23:50 +03:00
Files
mariadb/mysql-test/t
Arun Kuruvila c7e68606c0 Bug#21920657: SSL-CA FAILS SILENTLY IF THE PATH CANNOT BE
FOUND

Description:- Failure during the validation of CA
certificate path which is provided as an option for 'ssl-ca'
returns two different errors for YaSSL and OPENSSL.

Analysis:- 'ssl-ca', option used for specifying the ssl ca
certificate path. Failing to validate this certificate with
OPENSSL returns an error, "ERROR 2026 (HY000): SSL
connection error: SSL_CTX_set_default_verify_paths failed".
While YASSL returns "ERROR 2026 (HY000): SSL connection
error: ASN: bad other signature confirmation". Error
returned by the OPENSSL is correct since
"SSL_CTX_load_verify_locations()" returns 0 (in case of
OPENSSL) for the failure and sets error as
"SSL_INITERR_BAD_PATHS". In case of YASSL,
"SSL_CTX_load_verify_locations()" returns an error number
which is less than or equal to 0 in case of error. Error
numbers for YASSL is mentioned in the file,
'extra/yassl/include/openssl/ssl.h'(line no : 292). Also
'ssl-ca' does not accept tilde home directory path
substitution.

Fix:- The condition which checks for the error in the
"SSL_CTX_load_verify_locations()" is changed in order to
accommodate YASSL as well. A logic is written in
"mysql_ssl_set()" in order accept the tilde home directory
path substitution for all ssl options.
2016-03-01 10:17:25 +05:30
..
2011-09-16 14:35:25 +02:00
2011-01-25 12:14:28 +05:30
2011-02-17 12:53:09 +01:00
2011-02-17 12:53:09 +01:00
2011-01-17 15:26:13 +03:00
2011-03-03 18:46:30 +03:00
2012-09-26 17:04:19 +05:30
2012-03-12 09:24:59 +01:00
2011-05-05 08:13:22 +02:00
2010-11-26 16:32:51 +02:00
2011-04-14 13:10:11 +04:00
2011-03-03 15:27:36 +03:00
2011-04-12 14:13:15 +04:00
2011-08-19 09:06:50 +02:00
2010-12-16 21:43:21 +03:00
2013-07-01 15:38:16 +02:00
2011-03-09 16:04:50 +02:00
2011-08-30 10:16:23 +02:00
2013-01-11 06:36:53 +05:30
2011-12-14 15:33:01 +01:00
2011-01-14 19:21:27 +01:00
2012-02-13 15:37:50 +05:30
2011-09-16 16:21:05 +04:00
2010-08-25 13:17:15 +05:00
2015-10-29 13:35:32 +05:30
2014-04-23 17:01:35 +02:00
2011-06-13 11:57:47 +02:00
2011-12-14 15:33:01 +01:00
2011-01-10 16:13:12 +01:00
2010-10-20 16:56:09 +02:00
2010-10-20 16:56:09 +02:00
2010-10-20 16:56:09 +02:00
2012-01-26 10:25:23 +01:00
2012-04-18 11:34:36 +05:30
2012-10-29 13:06:43 +04:00
2010-07-04 20:35:05 +01:00
2011-08-08 17:45:43 +01:00
2012-03-28 13:35:08 +05:30
2011-06-16 13:54:16 +03:00
2012-02-29 14:15:15 +05:30
2016-02-19 23:31:10 +04:00
2011-01-14 09:36:24 +01:00
2011-01-14 09:36:24 +01:00
2011-01-12 10:31:41 +01:00
2011-03-28 13:57:54 +03:00