You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Start proxysql with enabled SSL (for example running SET mysql-have_ssl='true'; load mysql variables to runtime; .
Then use any client to establish an SSL connection without certificate. For example:
mysql -u sbtest -psbtest -h 127.0.0.1 -P6033 --ssl-mode=required
The full ProxySQL error log (default location: /var/lib/proxysql/proxysql.log)
The full error log is irrelevant.
The specific error message is:
2021-04-28 20:54:55 mysql_data_stream.cpp:189:do_ssl_handshake(): [ERROR] X509 error: no required certificate sent by client
Suggested changes:
The error here doesn't seem correct. The certificate is not required.
It should be replaced with a warning, and the warning itself should be toggled on or off using a new global variable.
The text was updated successfully, but these errors were encountered:
We currently disable this annoying error
In future we can configure this as per user level, specifying if the certificate is mandatory or not
See issue #3424
Original error was: X509 error: no required certificate sent by client
If a client tries to establish an SSL connection without specifying any certificate, proxysql will log an error
2.1.1 and newer.
But introduced in #3343
Any
Start proxysql with enabled SSL (for example running
SET mysql-have_ssl='true'; load mysql variables to runtime;
.Then use any client to establish an SSL connection without certificate. For example:
/var/lib/proxysql/proxysql.log
)The full error log is irrelevant.
The specific error message is:
Suggested changes:
The error here doesn't seem correct. The certificate is not required.
It should be replaced with a warning, and the warning itself should be toggled on or off using a new global variable.
The text was updated successfully, but these errors were encountered: