1
0
mirror of https://github.com/MariaDB/server.git synced 2025-05-13 01:01:44 +03:00
Venkata Sidagam 18087b049e Bug #13115401: -SSL-KEY VALUE IS NOT VALIDATED AND IT ALLOWS INSECURE
CONNECTIONS IF SPE

Problem description: -ssl-key value is not validated, you can assign any bogus 
text to --ssl-key and it is not verified that it exists, and more importantly, 
it allows the client to connect to mysqld.

Fix: Added proper validations checks for --ssl-key.

Note:
1) Documentation changes require for 5.1, 5.5, 5.6 and trunk in the sections
   listed below and the details are :

 http://dev.mysql.com/doc/refman/5.6/en/ssl-options.html#option_general_ssl
    and
 REQUIRE SSL section of
 http://dev.mysql.com/doc/refman/5.6/en/grant.html

2) Client having with option '--ssl', should able to get ssl connection. This 
will be implemented as part of separate fix in 5.6 and trunk.
2012-08-11 15:43:04 +05:30
..
2009-02-09 22:00:15 +01:00
2010-02-25 23:13:11 +04:00
2009-02-09 22:00:15 +01:00
2011-01-25 12:14:28 +05:30
2010-03-09 16:09:32 +01:00
2009-09-29 17:38:40 +02:00
2010-12-14 12:33:03 +03:00
2011-05-04 17:12:45 +02:00
2009-05-06 15:00:14 +05:30
2011-12-14 14:41:40 +01:00
2009-10-20 11:00:07 -07:00
2011-03-29 10:09:05 +02:00
2010-12-14 12:33:03 +03:00
2009-08-12 12:03:05 +02:00
2011-01-26 16:50:21 +01:00
2010-10-15 20:13:35 +05:00
2012-01-26 10:25:23 +01:00
2009-07-03 10:19:32 +02:00
2009-06-10 11:58:36 +03:00
2011-09-29 10:56:21 +01:00