Re: [Proftpd-user] can't connect to mariadb database, when the user requires SSL after update from 1.3.9 to 1.3.9a

Hello,

On Tue, Apr 28, TJ Saunders wrote:

> > I run the proftpd 1.3.9 with a mariadb backend.
> > In the database I force the use of ssl for mysql connection.
> >
> > After an update to version 1.3.9a the user can't login to the datebase
> > anymore.
> >
> > When I disable SSL on database (ALTER USER loginuser@'%' require none),
> > then proftpd can login with the version 1.3.9a.
> >
> > Is there a new parameter I have to the in the proftpd config file
> 
> There was a change to the mod_sql_mysql implementation with regards to configuring the client side TLS setup, for connecting via TLS to a MySQL/MariaDB; see:
> 
>   https://github.com/proftpd/proftpd/issues/340
>   https://github.com/proftpd/proftpd/commit/89becd5eee7dc857580addd71459655cc59d507b
> 
> However, there was no intended change of user-visible behavior; the goal was simply to use the newer API provided by the client library in order to maintain the same TLS behavior.
> 
> I'll try to reproduce the behavior you're seeing locally, try to narrow down what might be happening.

Thank you for the hint.
After I added ssl-ca:/etc/ssl/certs to the SQLConnectInfo line,
the mysql connection is encrypted and I can login to the mariadb.

Thank you very much for the link to the commit

-- 
Regards

  Dieter

--
I do not get viruses because I do not use MS software.
If you use Outlook then please do not put my email address in your
address-book so that WHEN you get a virus it won't use my address in the
From field.


_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html