In case I do actually want to use certificates and SSL, the error when
connecting to Aurora DB is a bit different:

In C++:

# ERR: SQLException in query: [] on line 0
# ERR: SSL connection error: error:1425F102:SSL 
routines:ssl_choose_client_version:unsupported protocol (MySQL error code: 
2026, SQLState: HY000 )

Using the command line client mysql:

mysql -h servername.rds.amazonaws.com -u username -p 
--ssl-ca=/home/username/sslcert/rds-combined-ca-bundle.pem --ssl-mode=VERIFY_CA
Enter password: 
ERROR 2026 (HY000): SSL connection error: 
error:00000001:lib(0):func(0):reason(1)

Again, all this works in previous versions of Ubuntu.

I guess if the connection works this is what Robie Basak means by a
downgrade attack.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1872541

Title:
  MySQL client fails to connect, seems to force SSL

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-release-notes/+bug/1872541/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to