Re: yaSSL replacement plan

--------------ms090700040309010203060909
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Content-Language: en-US

Clint,

I can always build from source and link OpenSSL. And I know there is a
WolfSSL patch available at:

https://github.com/wolfSSL/mysql-patch

My question is, when will the official MySQL Community Edition provided
binaries, which are also provided in many distros, ship with a yaSSL
replacement built in?

Steven Danneman
Security Engineer
Security Innovation | Seattle, WA

On 08/01/2017 05:00 PM, Clint Byrum wrote:
> It should work fine with WolfSSL:=20
>
> https://wolfssl.com/wolfSSL/Home.html
>
> Perhaps don't vendor it, and just depend on it?
>
> Excerpts from Steven Danneman's message of 2017-08-01 16:28:10 -0700:
>> Hello,
>>
>> The MySQL Community Edition TLS implementation (yaSSL) is getting
>> outdated, and lacking in support for several newer features like TLS1.=
2.
>> I believe further development on yaSSL has ceased, and so it seems tha=
t
>> a full replacement of the library is necessary to stay up to date with=

>> secure TLS best practices.
>>
>> Are there plans for updating the TLS library used in the Community
>> Edition? If so what's the new targeted library and release candidate?
>>
>> Thanks,
>>



--------------ms090700040309010203060909
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms090700040309010203060909--