[Proftpd-user] can't connect to mariadb database, when the user requires SSL after update from 1.3.9 to 1.3.9a

Hello,

I run the proftpd 1.3.9 with a mariadb backend.
In the database I force the use of ssl for mysql connection.

After an update to version 1.3.9a the user can't login to the datebase
anymore.

When I disable SSL on database (ALTER USER loginuser@'%' require none),
then proftpd can login with the version 1.3.9a.

Is there a new parameter I have to the in the proftpd config file

proftpd is compiled as follow:

--snip--
# proftpd -V
Compile-time Settings:
  Version: 1.3.9a (maint)
  Platform: LINUX [Linux 5.14.0-687.el9.x86_64 x86_64]
  OS/Release:
    PRETTY_NAME="Debian GNU/Linux 12 (bookworm)"
    NAME="Debian GNU/Linux"
    VERSION_ID="12"
    VERSION="12 (bookworm)"
    VERSION_CODENAME=bookworm
    ID=debian
  Built: Di Apr 28 2026 08:45:13 CEST
  Built With:
    configure  '--prefix=/usr' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--localstatedir=/var/lib/proftpd' '--mandir=/usr/share/man' '--disable-sendfile' '--disable-devel' '--disable-auth-pam' '--disable-ident' '--disable-ncurses' '--enable-timeout-idle=3600' '--enable-timeout-no-transfer=3600' '--enable-openssl' '--enable-nls' '--with-modules=mod_sftp:mod_quotatab:mod_quotatab_file:mod_sql:mod_sql_mysql:mod_quotatab_sql:mod_sftp_sql:mod_tls:mod_site_misc:mod_readme:mod_rewrite:mod_exec' 'CFLAGS=-g -O2 -fdebug-prefix-map=/tmp=. -fstack-protector-strong -Wformat -Werror=format-security' 'LDFLAGS=-Wl,-z,relro -Wl,-z,now' 'CPPFLAGS=-Wdate-time -D_FORTIFY_SOURCE=2' 'CXXFLAGS=-g -O2 -fdebug-prefix-map=/tmp=. -fstack-protector-strong -Wformat -Werror=format-security'
 
  CFLAGS: -g2 -g -O2 -fdebug-prefix-map=/tmp=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -fno-omit-frame-pointer -fno-strict-aliasing
  LDFLAGS: -Wl,-L$(top_srcdir)/lib,-L$(top_builddir)/lib -Wl,-z,relro -Wl,-z,now -rdynamic  -L/usr/lib/x86_64-linux-gnu/
  LIBS:  -lssl -lcrypto -lsodium -lssl  -lm -lmysqlclient -lz  -lcrypto -lcrypt  -pthread
 
  Files:
    Configuration File:
      /etc/proftpd.conf
    Pid File:
      /var/lib/proftpd/proftpd.pid
    Scoreboard File:
      /var/lib/proftpd/proftpd.scoreboard
 
  Info:
    + Max supported UID: 4294967295
    + Max supported GID: 4294967295
 
  Features:
    - Autoshadow support
    - Controls support
    - curses support
    - Developer support
    - DSO support
    + IPv6 support
    + Largefile support
    - Lastlog support
    - Memcache support
    - ncurses support
    + NLS support
    + OpenSSL support (OpenSSL 3.0.19 27 Jan 2026)
    - PCRE support
    - PCRE2 support
    - POSIX ACL support
    - Redis support
    - Sendfile support
    + Shadow file support
    + Sodium support
    + Trace support
    + xattr support
 
  Tunable Options:
    PR_TUNABLE_BUFFER_SIZE = 1024
    PR_TUNABLE_DEFAULT_RCVBUFSZ = 65536
    PR_TUNABLE_DEFAULT_SNDBUFSZ = 65536
    PR_TUNABLE_ENV_MAX = 2048
    PR_TUNABLE_GLOBBING_MAX_MATCHES = 100000
    PR_TUNABLE_GLOBBING_MAX_RECURSION = 8
    PR_TUNABLE_HASH_TABLE_SIZE = 40
    PR_TUNABLE_LOGIN_MAX = 256
    PR_TUNABLE_NEW_POOL_SIZE = 512
    PR_TUNABLE_PATH_MAX = 4096
    PR_TUNABLE_SCOREBOARD_BUFFER_SIZE = 80
    PR_TUNABLE_SCOREBOARD_SCRUB_TIMER = 30
    PR_TUNABLE_SELECT_TIMEOUT = 30
    PR_TUNABLE_TIMEOUTIDENT = 10
    PR_TUNABLE_TIMEOUTIDLE = 3600
    PR_TUNABLE_TIMEOUTLINGER = 10
    PR_TUNABLE_TIMEOUTLOGIN = 300
    PR_TUNABLE_TIMEOUTNOXFER = 3600
    PR_TUNABLE_TIMEOUTSTALLED = 3600
    PR_TUNABLE_XFER_SCOREBOARD_UPDATES = 10
--snip--

-- 
Regards

  Dieter

--
I do not get viruses because I do not use MS software.
If you use Outlook then please do not put my email address in your
address-book so that WHEN you get a virus it won't use my address in the
From field.


_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html