aminghadersohi commented on PR #44718:
URL: https://github.com/apache/superset/pull/44718#issuecomment-5904854391

   @rusackas #44723 landed on master, so I merged it in (337622876a). Your 
three points are unchanged: `require_mysql_tls` is keyed by driver, with 
`MYSQL_TLS_ENGINES` covering MariaDB. A saved `ssl_mode` counts as a TLS 
request. `ssl_disabled=True` fails on mysqlclient.
   
   One behaviour comes from master: mysqlclient now keeps `REQUIRED` with 
recognized Oracle libmysqlclient 5.7/8.x/9.x, which fails closed. It upgrades 
to `VERIFY_CA` only for MariaDB Connector/C or unknown clients. The MariaDB 
Connector/C cleartext fallback is still closed for plain MySQL, MariaDB and 
Doris. Tests pin the client library for both outcomes. UPDATING and the MySQL 
notes no longer say `mariadb://` keeps its old SSL handling.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to