Comments - Securing Connections for Client and Server

4 months, 3 weeks ago Tommy Pham

Hi Sergei,

Thank you for the feedback. No, it's redacted. The server and client are on the same host of FreeBSD 12.1. I've check the compiled library linking to the OpenSSL:

  1. readelf -a /usr/local/lib/mysql/libmariadbclient.a | grep SSL_init 00000000003e 001a00000004 R_X86_64_PLT32 0000000000000000 OPENSSL_init_ssl + fffffffffffffffc 26: 0000000000000000 0 NOTYPE GLOBAL DEFAULT UND OPENSSL_init_ssl
  2. readelf -a /usr/local/lib/mysql/ | grep SSL_init 000000054408 005700000007 R_X86_64_JUMP_SLOT 0000000000000000 OPENSSL_init_ssl + 0 87: 0000000000000000 0 FUNC GLOBAL DEFAULT UND OPENSSL_init_ssl@OPENSSL_1_1_0 (7)

The libmariadb seems to link correctly while the libmariadbclient doesn't. I presume that the server uses libmariadb and the 'mysql' client uses libmariadbclient even though both client and server are compiled from the same source but with different configurations? If that's the case, I'll need to file a bug with the maintainer. By the way, when run the 'mariadb_config' on the client, does it utilizes libmariadbclient or libmariadb because the mariadb_config shows a different OpenSSL version 1.1.1e.

Thanks, Tommy

4 months, 2 weeks ago Sergei Golubchik and libmariadbclient.a are compiled from the same source tree and same settings. One make command compiles both.

The "mysql" client is linked with libmariadbclient.a (you can check with ldd). The server uses neither.

4 months, 2 weeks ago Tommy Pham

Thank you for the clarification and confirmation regarding my suspicion of "mysql" client linking to libmariadbclient.

Content reproduced on this site is the property of its respective owners, and this content is not reviewed in advance by MariaDB. The views, information and opinions expressed by this content do not necessarily represent those of MariaDB or any other party.