[openssl-dev] [openssl.org #4261] AutoReply: BUG unable to connect to Mysql via ssl connection.

[Alan Bocutt via RT]

Apologies, spotted my own error when reading you notification error path incorrect for ssl_ca certificate file..

Many Thanks

Alan

-----Original Message-----
From: The default queue via RT [mailto:rt at openssl.org] 
Sent: 21 January 2016 15:50
To: alan.bocutt at outlook.com
Subject: [openssl.org #4261] AutoReply: BUG unable to connect to Mysql via ssl connection.


Greetings,

This message has been automatically generated in response to the creation of a trouble ticket regarding:
	"BUG unable to connect to Mysql via ssl connection.", a summary of which appears below.

There is no need to reply to this message right now.  Your ticket has been assigned an ID of [openssl.org #4261].

Please include the string:

         [openssl.org #4261]

in the subject line of all future correspondence about this issue. To do so, you may reply to this message.

                        Thank you,
                        rt at openssl.org

-------------------------------------------------------------------------
I am currently running Ubuntu with Mysql and am unable to connect via an ssl connection to the database getting following error.

 

error 2026 (hy000): ssl connection error: protocol version mismatch

 

My installation details are as follows

 

Ubuntu version 

Linux ubuntu-365sussex 3.19.0-25-generic #26~14.04.1-Ubuntu SMP Fri Jul 24
21:16:20 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux

 

Installed Version info for OpenSSL

OpenSSL 1.0.1f 6 Jan 2014

built on: Fri Dec  4 13:55:16 UTC 2015

platform: debian-amd64

options:  bn(64,64) rc4(8x,int) des(idx,cisc,16,int) blowfish(idx) 

compiler: cc -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -m64 -DL_ENDIAN -DTERMIO -g -O2 -fstack-protector
--param=ssp-buffer-size=4 -Wformat -Werror=format-security
-D_FORTIFY_SOURCE=2 -Wl,-Bsymbolic-functions -Wl,-z,relro -Wa,--noexecstack -Wall -DMD32_REG_T=int -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT
-DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM

OPENSSLDIR: "/usr/lib/ssl"

 

Mysql version

 

mysql> show variables like "%version%"

    -> ;

+-------------------------+-------------------------+

| Variable_name           | Value                   |

+-------------------------+-------------------------+

| innodb_version          | 5.6.27                  |

| protocol_version        | 10                      |

| slave_type_conversions  |                         |

| version                 | 5.6.27-0ubuntu0.14.04.1 |

| version_comment         | (Ubuntu)                |

| version_compile_machine | x86_64                  |

| version_compile_os      | debian-linux-gnu        |

+-------------------------+-------------------------+

7 rows in set (0.00 sec)

 

Mysql SSL info

 

mysql> show variables Like "%ssl%";

+---------------+-------------------------------------+

| Variable_name | Value                               |

+---------------+-------------------------------------+

| have_openssl  | YES                                 |

| have_ssl      | YES                                 |

| ssl_ca        | /etc/mysql/newcerst/ca.pem          |

| ssl_capath    |                                     |

| ssl_cert      | /etc/mysql/newcerts/server-cert.pem |

| ssl_cipher    |                                     |

| ssl_crl       |                                     |

| ssl_crlpath   |                                     |

| ssl_key       | /etc/mysql/newcerts/server-key.pem  |

+---------------+-------------------------------------+

9 rows in set (0.00 sec)

 

mysql> notee;

 

Not sure what more info you need or want please ask..

 

Regards

 

Alan Bocutt

365Sussex Limited