Re: [Bug 1971788] Re: Failure to enable SSL out of the box when in fips mode

2022-05-31 Thread Seth Arnold
On Mon, May 30, 2022 at 09:38:52AM -, Tobias Heider wrote: > I don't think it does, but you have a point. It might be a little safer > not to touch the function signature. Here's an updated fix. This isn't quite as easy to read but I do like that the signature is unchanged. I sure hope

[Bug 1971788] Re: Failure to enable SSL out of the box when in fips mode

2022-05-30 Thread Tobias Heider
> does this change the ABI in any way that anything would care about or notice? I don't think it does, but you have a point. It might be a little safer not to touch the function signature. Here's an updated fix. ** Patch added: "Autodetect FIPS kernel focal 2"

[Bug 1971788] Re: Failure to enable SSL out of the box when in fips mode

2022-05-27 Thread Seth Arnold
Hello Tobias, just a quick question on the patch: +-int set_fips_mode(const uint fips_mode, char err_string[OPENSSL_ERROR_LENGTH]) { ++int set_fips_mode(uint fips_mode, char err_string[OPENSSL_ERROR_LENGTH]) { does this change the ABI in any way that anything would care about or notice? Thanks

[Bug 1971788] Re: Failure to enable SSL out of the box when in fips mode

2022-05-27 Thread Ubuntu Foundations Team Bug Bot
The attachment "Autodetect FIPS kernel focal" seems to be a debdiff. The ubuntu-sponsors team has been subscribed to the bug report so that they can review and hopefully sponsor the debdiff. If the attachment isn't a patch, please remove the "patch" flag from the attachment, remove the "patch"

[Bug 1971788] Re: Failure to enable SSL out of the box when in fips mode

2022-05-27 Thread Tobias Heider
> have mysql detect a fips environment and auto-adjust? This seems to be the best solution in terms of UX. I think auto- switching to SSL + fips mode is always better than failing with a cryptic OpenSSL error from a user's point of view. The attached fix makes both client and server detect if

[Bug 1971788] Re: Failure to enable SSL out of the box when in fips mode

2022-05-20 Thread Tobias Heider
** Changed in: mysql-8.0 (Ubuntu) Assignee: Henry Coggill (henrycoggill) => Tobias Heider (tobhe) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1971788 Title: Failure to enable SSL out of the

[Bug 1971788] Re: Failure to enable SSL out of the box when in fips mode

2022-05-11 Thread Robie Basak
** Tags removed: server-triage-discuss -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1971788 Title: Failure to enable SSL out of the box when in fips mode To manage notifications about this bug go

[Bug 1971788] Re: Failure to enable SSL out of the box when in fips mode

2022-05-06 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: mysql-8.0 (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1971788 Title:

[Bug 1971788] Re: Failure to enable SSL out of the box when in fips mode

2022-05-06 Thread Henry Coggill
** Changed in: mysql-8.0 (Ubuntu) Assignee: (unassigned) => Henry Coggill (henrycoggill) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1971788 Title: Failure to enable SSL out of the box when

[Bug 1971788] Re: Failure to enable SSL out of the box when in fips mode

2022-05-06 Thread John Chittum
Data points provided: using an 18.04 Bionic FIPS cloud image, doing ``` apt-get update && apt-get install mysql-server mysql-client ``` successfully installs the server and client, and enables TLS properly for the FIPS environment. There may be a difference in packaging scripts between