Bug#892514: libdbd-mysql-perl: 4.046-1 SSL certificate validation failure

2018-07-21 Thread Corey Hickey
I filed a bug against mariadb-client-core-10.1 for this: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=904223 I don't know if there is anything that can be done for libdbd-mysql-perl, since the problem seems to be in the underlying mariadb library. -Corey

Bug#892514: libdbd-mysql-perl: 4.046-1 SSL certificate validation failure

2018-07-20 Thread Corey Hickey
The problem in more detail is that when the server hostname is listed as a SubjectAltName ("SAN") in the certificate, then validation fails. Validation only succeeds if the server hostname is in the CN of the certificate. This seems likely to be a bug in the underlying mariadb library. I was unabl

Bug#892514: libdbd-mysql-perl: 4.046-1 SSL certificate validation failure

2018-03-09 Thread Corey Hickey
Package: libdbd-mysql-perl Version: 4.046-1 Severity: normal Dear Maintainer, Upon upgrade from 4.041-2+b1 to 4.046-1, I can no longer connect to our mysql database with SSL. Reverting to 4.041-2+b1 makes the connection work again. Here is a test script to reproduce (with database name and hostn