1
0
mirror of https://github.com/MariaDB/server.git synced 2025-08-31 22:22:30 +03:00
Files
mariadb/mysql-test/r
Venkata Sidagam 18087b049e Bug #13115401: -SSL-KEY VALUE IS NOT VALIDATED AND IT ALLOWS INSECURE
CONNECTIONS IF SPE

Problem description: -ssl-key value is not validated, you can assign any bogus 
text to --ssl-key and it is not verified that it exists, and more importantly, 
it allows the client to connect to mysqld.

Fix: Added proper validations checks for --ssl-key.

Note:
1) Documentation changes require for 5.1, 5.5, 5.6 and trunk in the sections
   listed below and the details are :

 http://dev.mysql.com/doc/refman/5.6/en/ssl-options.html#option_general_ssl
    and
 REQUIRE SSL section of
 http://dev.mysql.com/doc/refman/5.6/en/grant.html

2) Client having with option '--ssl', should able to get ssl connection. This 
will be implemented as part of separate fix in 5.6 and trunk.
2012-08-11 15:43:04 +05:30
..
2009-02-10 16:27:35 +03:00
2010-02-25 23:13:11 +04:00
2011-01-25 12:14:28 +05:30
2010-03-09 16:09:32 +01:00
2009-08-10 15:46:20 -03:00
2010-12-14 12:33:03 +03:00
2011-05-04 17:12:45 +02:00
2009-06-01 16:00:38 +04:00
2009-02-03 14:45:17 +01:00
2009-05-06 15:00:14 +05:30
2011-12-14 14:41:40 +01:00
2011-03-29 10:09:05 +02:00
2010-12-14 12:33:03 +03:00
2010-12-01 12:25:31 +05:30
2009-02-19 18:22:28 +01:00
2009-11-06 17:54:19 +03:00
2009-02-03 14:45:17 +01:00
2011-01-26 16:50:21 +01:00
2010-10-15 20:13:35 +05:00
2009-10-27 14:09:36 +04:00
2012-01-26 10:25:23 +01:00
2009-06-10 11:58:36 +03:00
2009-02-09 22:00:15 +01:00
2011-09-29 10:56:21 +01:00