[debian-mysql] Bug#429014: mysql-server-5.0: Slave unable to connect over SSL when using yassl

[debbug at sleeperservices.com]

Package: mysql-server-5.0
Version: 5.0.32-7etch1
Severity: normal


After upgrading from 4.1, a previously working slave server is unable to 
connect to the master, the error in syslog is:

[ERROR] Slave I/O thread: error connecting to master 'repluser at 10.10.10.2:3306':
 Error: 'SSL connection error'  errno: 2026  retry-time: 60  retries: 86400

Downloading the mysql-dfsg source and recompiling the package with 
"--without-yassl" and "--with-openssl" fixes the problem, the slave is once 
again able to connect to the master normally. Master is running standard 
5.0.32-7etch1 (i.e. with yassl,not openssl compiled in). The SSL certificates 
were generated with openssl and have not been changed from previously working
4.1 setup. 

Connecting manually with

mysql --ssl -u repluser -h 10.10.10.2 -p

from the slave machine works, regardless whether the version with yassl or 
openssl is installed.

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (800, 'stable'), (500, 'testing'), (400, 'unstable')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.8-12-amd64-k8-smp
Locale: LANG=de_DE, LC_CTYPE=de_DE (charmap=ISO-8859-1)

Versions of packages mysql-server-5.0 depends on:
ii  adduser                    3.102         Add and remove users and groups
ii  debconf [debconf-2.0]      1.5.11        Debian configuration management sy
ii  libc6                      2.3.6.ds1-13  GNU C Library: Shared libraries
ii  libdbi-perl                1.53-1        Perl5 database interface by Tim Bu
ii  libgcc1                    1:4.1.1-21    GCC support library
ii  libmysqlclient15off        5.0.32-7etch1 mysql database client library
ii  libncurses5                5.5-5         Shared libraries for terminal hand
ii  libreadline5               5.2-2         GNU readline and history libraries
ii  libstdc++6                 4.1.1-21      The GNU Standard C++ Library v3
ii  libwrap0                   7.6.dbs-13    Wietse Venema's TCP wrappers libra
ii  lsb-base                   3.1-23.1      Linux Standard Base 3.1 init scrip
ii  mysql-client-5.0           5.0.32-7etch1 mysql database client binaries
ii  mysql-common               5.0.32-7etch1 mysql database common files (e.g. 
ii  passwd                     1:4.0.18.1-7  change and administer password and
ii  perl                       5.8.8-7       Larry Wall's Practical Extraction 
ii  psmisc                     22.3-1        Utilities that use the proc filesy
ii  zlib1g                     1:1.2.3-13    compression library - runtime

Versions of packages mysql-server-5.0 recommends:
ii  mailx            1:8.1.2-0.20050715cvs-1 A simple mail user agent

-- debconf information:
  mysql-server-5.0/really_downgrade: false
* mysql-server-5.0/need_sarge_compat: true
  mysql-server-5.0/start_on_boot: true
  mysql-server/error_setting_password:
  mysql-server-5.0/nis_warning:
  mysql-server-5.0/postrm_remove_databases: false
  mysql-server-5.0/need_sarge_compat_done: true