[debian-mysql] Bug#851132: Bug#851132: /usr/sbin/mysqld: ssl_ciphers not working; mariadb built without TLS support?

Matthew Sackman matthew at wellquite.org
Wed Jan 25 10:10:02 UTC 2017


On Wed, Jan 25, 2017 at 09:44:00AM +0200, Otto Kekäläinen wrote:
> Ok, this is now figured out.
> 
> To activate YaSSL you must have 'ssl=on' in the config and no
> ssl_cipher defined.

Erm, ok, but this is somewhat terrifying - I can't disable insecure and
broken ciphers? I basically would consider anything < TLSv1.2
insecure and I would expect to be able to restrict even the ciphers
within TLSv1.2. This is in keeping with standard practise for apache,
dovecot, postfix etc etc.

Matthew



More information about the pkg-mysql-maint mailing list