Re: HOLD apr-1.7.1-rc2

2023-01-26 Thread Eric Covener
On Wed, Jan 25, 2023 at 4:51 PM William Kimball Jr. wrote: > > On 1/25/2023 3:16 PM, Eric Covener wrote: > > > I can't state this enough: this is a serious security threat. MySQL > connections need TLS support from APR. This isn't a "feature"; it is a > "security" issue. We should all care

Re: HOLD apr-1.7.1-rc2

2023-01-25 Thread William Kimball Jr.
On 1/25/2023 3:16 PM, Eric Covener wrote: I can't state this enough: this is a serious security threat. MySQL connections need TLS support from APR. This isn't a "feature"; it is a "security" issue. We should all care very deeply about this. I think it is/can be both a feature and a

Re: HOLD apr-1.7.1-rc2

2023-01-25 Thread Eric Covener
On Wed, Jan 25, 2023 at 1:53 PM William Kimball Jr. wrote: > > Eric Covener has instructed me to spin this discussion off to another thread, > so here it is. > > Way back in 2018, I submitted > https://bz.apache.org/bugzilla/show_bug.cgi?id=62342 (apr_dbd_mysql Lacks TLS > Support). Data