Add support for TLS 1.1 and 1.2, disable 1.0 by default
https:/
This is to add TLS v1.1 and v1.2 protocol support to Percona Server 5.5, which currently supports only TLS v1.0. At the same time disable (but provide way to re-enable if needed) TLS v1.0 support.
Backport 5.7 server variable tls-version: http://
The client-side will get the ability to make TLSv1.1 and 1.2 connections, but the option to allow only some protocol versions (--tls-version, MYSQL_OPT_
Introduce new server read-only global variable have_tlsv1_2, which is set to ON if the server has been compiled with a SSL library providing TLSv1.2 support. This variable is to be used by the testsuite to skip the TLSv1.2-requiring tests on old OpenSSL/YaSSL builds.
Blueprint information
- Status:
- Complete
- Approver:
- Laurynas Biveinis
- Priority:
- High
- Drafter:
- Laurynas Biveinis
- Direction:
- Approved
- Assignee:
- Laurynas Biveinis
- Definition:
- Approved
- Series goal:
- Accepted for 5.5
- Implementation:
- Implemented
- Milestone target:
- 5.5.50-38.0
- Started by
- Laurynas Biveinis
- Completed by
- Laurynas Biveinis
Related branches
Related bugs
Sprints
Whiteboard
Work Items
Dependency tree
* Blueprints in grey have been implemented.