Skip to content

Commit 7b74e4b

Browse files
Anushree Prakash Bdahlerlend
authored andcommitted
Bug#29414245 - BOTH MYSQL CLIENT AND SHELL FAIL TO CONNECT
TO 5.7 COMMUNITY SERVER DESCRIPTION: ============ 8.0 clients fail to connect to 5.7 community edition servers using SSL. ANALYSIS: ========= The clients fail to connect with the ssl error: unsafe legacy renegotiation disabled. This is because, the option SSL_OP_LEGACY_SERVER_CONNECT was cleared while setting the ssl options. FIX: ==== This patch reverts the changes that were added to clear SSL_OP_LEGACY_SERVER_CONNECT option so that clients can connect successfully to 5.7 community edition server. This option is currently set by default in openssl library. RB: 21622 Change-Id: Ie4c90eae6f118e118f59dcd6003e5e9a5dccba8d
1 parent 2a6efc7 commit 7b74e4b

File tree

1 file changed

+0
-3
lines changed

1 file changed

+0
-3
lines changed

vio/viossl.cc

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -497,9 +497,6 @@ static int ssl_do(struct st_VioSSLFd *ptr, Vio *vio, long timeout,
497497
SSL_clear(ssl);
498498
SSL_SESSION_set_timeout(SSL_get_session(ssl), timeout);
499499
SSL_set_fd(ssl, sd);
500-
#if !defined(HAVE_WOLFSSL) && OPENSSL_VERSION_NUMBER > 0x00908000L
501-
SSL_clear_options(ssl, SSL_OP_LEGACY_SERVER_CONNECT);
502-
#endif
503500
#if !defined(HAVE_WOLFSSL) && defined(SSL_OP_NO_COMPRESSION)
504501
SSL_set_options(ssl, SSL_OP_NO_COMPRESSION); /* OpenSSL >= 1.0 only */
505502
#elif !defined(HAVE_WOLFSSL) && \

0 commit comments

Comments
 (0)