[Bug 1890611] Re: Client cannot connect to remote mysql-server when the latter is configured with ssl parameters using a public CA

2020-10-26 Thread Launchpad Bug Tracker
[Expired for mysql-8.0 (Ubuntu) because there has been no activity for 60 days.] ** Changed in: mysql-8.0 (Ubuntu) Status: Incomplete => Expired -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report.

[Bug 1890611] Re: Client cannot connect to remote mysql-server when the latter is configured with ssl parameters using a public CA

2020-08-27 Thread jean-christophe manciot
Same issue with mysql-server 8.0.21-1 on groovy. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1890611 Title: Client cannot connect to remote mysql-server when the latter is configured

[Bug 1890611] Re: Client cannot connect to remote mysql-server when the latter is configured with ssl parameters using a public CA

2020-08-24 Thread Lucas Kanashiro
Hi Jean-Christophe, Sorry for this back and forth, I tried again to reproduce what you mentioned but with a self-signed CA (like Rafael did in the first comment) and it worked like a charm. Before you saying this is not the same scenario you are facing, as far as I can see you are reporting a

[Bug 1890611] Re: Client cannot connect to remote mysql-server when the latter is configured with ssl parameters using a public CA

2020-08-21 Thread jean-christophe manciot
Sorry: I have inadvertently tested with a port matching another service (853 instead of 3306), so my previous post must be ignored. This issue is still there, even on groovy. Let me answer your questions again: 0) with a service answering correctly to TLS connections requests, we get with a

[Bug 1890611] Re: Client cannot connect to remote mysql-server when the latter is configured with ssl parameters using a public CA

2020-08-21 Thread jean-christophe manciot
** Changed in: mysql-8.0 (Ubuntu) Status: Fix Released => New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1890611 Title: Client cannot connect to remote mysql-server when the

[Bug 1890611] Re: Client cannot connect to remote mysql-server when the latter is configured with ssl parameters using a public CA

2020-08-21 Thread jean-christophe manciot
1. already shared in my first post 2. You don't seem to understand this issue. Not a problem, because in the meantime, I have upgraded to groovy with: mysql-server-8.0: Installed: 8.0.21-0ubuntu4 Now I get: ... SSL_connect:SSLv3/TLS write finished --- Certificate chain 0 s:CN = *.domain

[Bug 1890611] Re: Client cannot connect to remote mysql-server when the latter is configured with ssl parameters using a public CA

2020-08-20 Thread Paride Legovini
Hi, I'd say that the problem is with mysqld using a different CA certificate from the one specified by the ssl-ca option. I doubt it's the letsencrypt certificate the one being used, correct me if I'm wrong (y can check with e.g. `openssl c_client`). Could you please: 1. share the ssl config

[Bug 1890611] Re: Client cannot connect to remote mysql-server when the latter is configured with ssl parameters using a public CA

2020-08-19 Thread jean-christophe manciot
I suggest you try to configure your mysql-server with SSL parameters using a public CA, since this is the use case of this issue. ** Changed in: mysql-8.0 (Ubuntu) Status: Incomplete => New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed

[Bug 1890611] Re: Client cannot connect to remote mysql-server when the latter is configured with ssl parameters using a public CA

2020-08-19 Thread jean-christophe manciot
I changed the title to better reflect the core issue of this thread. ** Summary changed: - mysql-server does not take into account configured ssl parameters + Client cannot connect to remote mysql-server when the latter is configured with ssl parameters using a public CA -- You received this