[debian-mysql] Bug#851132: /usr/sbin/mysqld: ssl_ciphers not working; mariadb built without TLS support?

[Matthew Sackman]

Package: mariadb-server-core-10.1
Version: 10.1.20-3
Severity: important
File: /usr/sbin/mysqld

Hi,

In my /etc/mysql/mariadb.conf.d/50-server.cnf file, I have
ssl_cipher=TLSv1.2

However, on startup, the logs contain:

2017-01-12  8:53:04 139750636693376 [Warning] Failed to setup SSL
2017-01-12  8:53:04 139750636693376 [Warning] SSL error: Failed to set ciphers to use

It's difficult to verify at this point, but I'm fairly sure this used to
work fine. Even more interesting is that ldd gives:

# ldd /usr/sbin/mysqld
        linux-vdso.so.1 (0x00007ffc393bf000)
        libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007f559a013000)
        libaio.so.1 => /lib/x86_64-linux-gnu/libaio.so.1 (0x00007f5599e11000)
        libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x00007f5599bf7000)
        libpcre.so.3 => /lib/x86_64-linux-gnu/libpcre.so.3 (0x00007f5599984000)
        libjemalloc.so.1 => /usr/lib/x86_64-linux-gnu/libjemalloc.so.1 (0x00007f559974d000)
        libcrypt.so.1 => /lib/x86_64-linux-gnu/libcrypt.so.1 (0x00007f5599513000)
        libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f559930f000)
        libstdc++.so.6 => /usr/lib/x86_64-linux-gnu/libstdc++.so.6 (0x00007f5598f8e000)
        libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007f5598c8a000)
        libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f55988ec000)
        /lib64/ld-linux-x86-64.so.2 (0x0000557e1ecbc000)
        libgcc_s.so.1 => /lib/x86_64-linux-gnu/libgcc_s.so.1 (0x00007f55986d5000)

which does not contain any ssl/tls lib that I can see. This makes me
wonder whether mariadb is being built currently without any ssl/tls
support?

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.8.0-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages mariadb-server-core-10.1 depends on:
ii  libaio1         0.3.110-3
ii  libc6           2.24-8
ii  libjemalloc1    3.6.0-9
ii  libpcre3        2:8.39-2
ii  libstdc++6      6.2.1-5
ii  mariadb-common  10.1.20-3
ii  zlib1g          1:1.2.8.dfsg-4

mariadb-server-core-10.1 recommends no packages.

mariadb-server-core-10.1 suggests no packages.

-- no debconf information

Many thanks for your time.

Matthew