Mariadb ssl/tls connection encryption

[Louis Kirouac]

Merci Bruno.

Louis Kirouac



On Wed, 21 Sept 2022 at 11:10, Bruno Del Sol <bruno.delsol at bydesign.fr>
wrote:

> Salut Louis,
>
> Yes, Studio 10.1 supports Mariadb 10.5 and no further. Downgrading Mariadb
> will fix your crash, otherwise you need to
> move to the latest Studio 10.2 and the mysql lib provided by Omnis.
>
> Schuss
> Bruno
>
> By Design
> http://www.bydesign.fr
> Bruno Del Sol
> bruno.delsol at bydesign.fr
> 46, rue de La Tour d'Auvergne
> 75009 Paris (France)
>
> Le 21/09/2022 à 16:38, Louis Kirouac a écrit :
> > Hi $all
> >
> > I am having further problems connecting with an encrypted connection.
> >
> > I am using Omnis Studio 10.1 rel 29237, patched up as per Technote
> TNSQ0039
> >
> > I can connect to a dev server with no problem:
> > Server version: 10.3.28-MariaDB MariaDB Server
> > version_ssl_library OpenSSL 1.1.1k  FIPS 25 Mar 2021
> >
> > When I connect to a new, soon to be production server:
> > Server version: 10.6.8-MariaDB MariaDB Server
> > version_ssl_library OpenSSL 1.1.1o  3 May 2022
> > Both Omins dev and runtime crash
> >
> > When i connect with Terminal or with DBeaver both work ok and I get:
> > Ssl_cipher   TLS_AES_128_GCM_SHA256|
> >
> > Is the mariadb version too new for Omnis 10.1 ??
> >
> > Louis Kirouac
> >
> >
> > On Fri, 9 Sept 2022 at 09:23, Louis Kirouac <lkirouac at gmail.com> wrote:
> >
> >> Thanks again Michael for the lead about technote TNSQ0039.
> >>
> >> It did the trick, Omnis 10.1 (with 10.2 mysqldam) connects to MariaDB
> >> 10.3.28 server with ssl encryption.
> >>
> >> Thanks
> >>
> >> Louis Kirouac
> >>
> >>
> >>
> >> On Thu, 8 Sept 2022 at 11:13, Louis Kirouac <lkirouac at gmail.com> wrote:
> >>
> >>> Hi Michael,
> >>>
> >>> Thanks for bringing that technote to my attention.
> >>> I will try to put that in place.
> >>>
> >>> Thanks
> >>>
> >>> Louis Kirouac
> >>> 514-248-2884
> >>>
> >>>
> >>> On Thu, 8 Sept 2022 at 10:54, Michael Houlberg <
> >>> michael at houlbergdevelopment.com> wrote:
> >>>
> >>>> Louis,
> >>>>
> >>>> I think you need to also implement the tech note TNSQ0039.
> >>>>
> >>>> Michael Houlberg
> >>>> Houlberg Development, LLC
> >>>>
> >>>> Sent from my iPad
> >>>>
> >>>>> On Sep 8, 2022, at 5:46 AM, Louis Kirouac <lkirouac at gmail.com>
> wrote:
> >>>>>
> >>>>> Good morning
> >>>>>
> >>>>> I am trying to set up secured connections as per:
> >>>>>
> >>>>> https://omnis.net/developers/resources/technotes/tnsq0030.jsp
> >>>>>
> >>>>> I am using Omnis 10.1 rel 29237
> >>>>>
> >>>>> On one server:
> >>>>> mysql  Ver 15.1 Distrib 10.1.48-MariaDB, for debian-linux-gnu
> (x86_64)
> >>>>> the user omnis uses was modified to REQUIRE SSL
> >>>>> and Omnis can connect - Ssl_cipher is set
> >>>>>
> >>>>> On another server:
> >>>>> mysql  Ver 15.1 Distrib 10.3.28-MariaDB, for Linux (x86_64) centos 8
> >>>>> when ssl is set on that server, Omnis is not able to connect to any
> >>>> user,
> >>>>> modified to REQUIRE SSL or not
> >>>>>
> >>>>> I tried to modify my connection in Omnis as per the technical note to
> >>>> use a
> >>>>> default options file or the $sslset() method
> >>>>> with no luck.
> >>>>>
> >>>>> When using dbeaver, it can connect to a user modified to REQUIRE SSL
> >>>> on the
> >>>>> server, and in dbeaver the account is modified to use ssl, the
> >>>> Ssl_cipher
> >>>>> is set
> >>>>>
> >>>>> Does anyone have suggestions on what I should try?
> >>>>>
> >>>>> Thanks for your help
> >>>>>
> >>>>> Louis Kirouac
> >>>>> 514-248-2884
> >>>>> _____________________________________________________________
> >>>>> Manage your list subscriptions at https://lists.omnis-dev.com
> >>>>> Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com
> >>>> _____________________________________________________________
> >>>> Manage your list subscriptions at https://lists.omnis-dev.com
> >>>> Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com
> >>>>
> > _____________________________________________________________
> > Manage your list subscriptions at https://lists.omnis-dev.com
> > Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com
>