Mariadb ssl/tls connection encryption

[Louis Kirouac]

Hi $all

I am having further problems connecting with an encrypted connection.

I am using Omnis Studio 10.1 rel 29237, patched up as per Technote TNSQ0039

I can connect to a dev server with no problem:
Server version: 10.3.28-MariaDB MariaDB Server
version_ssl_library OpenSSL 1.1.1k  FIPS 25 Mar 2021

When I connect to a new, soon to be production server:
Server version: 10.6.8-MariaDB MariaDB Server
version_ssl_library OpenSSL 1.1.1o  3 May 2022
Both Omins dev and runtime crash

When i connect with Terminal or with DBeaver both work ok and I get:
Ssl_cipher   TLS_AES_128_GCM_SHA256|

Is the mariadb version too new for Omnis 10.1 ??

Louis Kirouac


On Fri, 9 Sept 2022 at 09:23, Louis Kirouac <lkirouac at gmail.com> wrote:

> Thanks again Michael for the lead about technote TNSQ0039.
>
> It did the trick, Omnis 10.1 (with 10.2 mysqldam) connects to MariaDB
> 10.3.28 server with ssl encryption.
>
> Thanks
>
> Louis Kirouac
>
>
>
> On Thu, 8 Sept 2022 at 11:13, Louis Kirouac <lkirouac at gmail.com> wrote:
>
>> Hi Michael,
>>
>> Thanks for bringing that technote to my attention.
>> I will try to put that in place.
>>
>> Thanks
>>
>> Louis Kirouac
>> 514-248-2884
>>
>>
>> On Thu, 8 Sept 2022 at 10:54, Michael Houlberg <
>> michael at houlbergdevelopment.com> wrote:
>>
>>> Louis,
>>>
>>> I think you need to also implement the tech note TNSQ0039.
>>>
>>> Michael Houlberg
>>> Houlberg Development, LLC
>>>
>>> Sent from my iPad
>>>
>>> > On Sep 8, 2022, at 5:46 AM, Louis Kirouac <lkirouac at gmail.com> wrote:
>>> >
>>> > Good morning
>>> >
>>> > I am trying to set up secured connections as per:
>>> >
>>> > https://omnis.net/developers/resources/technotes/tnsq0030.jsp
>>> >
>>> > I am using Omnis 10.1 rel 29237
>>> >
>>> > On one server:
>>> > mysql  Ver 15.1 Distrib 10.1.48-MariaDB, for debian-linux-gnu (x86_64)
>>> > the user omnis uses was modified to REQUIRE SSL
>>> > and Omnis can connect - Ssl_cipher is set
>>> >
>>> > On another server:
>>> > mysql  Ver 15.1 Distrib 10.3.28-MariaDB, for Linux (x86_64) centos 8
>>> > when ssl is set on that server, Omnis is not able to connect to any
>>> user,
>>> > modified to REQUIRE SSL or not
>>> >
>>> > I tried to modify my connection in Omnis as per the technical note to
>>> use a
>>> > default options file or the $sslset() method
>>> > with no luck.
>>> >
>>> > When using dbeaver, it can connect to a user modified to REQUIRE SSL
>>> on the
>>> > server, and in dbeaver the account is modified to use ssl, the
>>> Ssl_cipher
>>> > is set
>>> >
>>> > Does anyone have suggestions on what I should try?
>>> >
>>> > Thanks for your help
>>> >
>>> > Louis Kirouac
>>> > 514-248-2884
>>> > _____________________________________________________________
>>> > Manage your list subscriptions at https://lists.omnis-dev.com
>>> > Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com
>>> _____________________________________________________________
>>> Manage your list subscriptions at https://lists.omnis-dev.com
>>> Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com
>>>
>>