[jira] [Created] (GUACAMOLE-1453) SSL communication by mariadb connector/J is not possible

["Tadashi Kanda (Jira)" <ji...@apache.org>]

Tadashi Kanda created GUACAMOLE-1453:
----------------------------------------

             Summary: SSL communication by mariadb connector/J is not possible
                 Key: GUACAMOLE-1453
                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-1453
             Project: Guacamole
          Issue Type: Improvement
          Components: guacamole-auth-jdbc-mysql
    Affects Versions: 1.3.0, 1.2.0
         Environment: Guacamole-Client: 1.2.0
Guacamole-Server: 1.2.0
ServerOS: CentOS7.9
MariaDB Connector/J: 2.7.3
            Reporter: Tadashi Kanda


 

For SSL connection between Guacamole and DB using MaraiDB Connector / J, SSL connection was not enabled even if the following parameters were set.
※MariaDB connector / J version uses 2.7.3.

★/etc/guacamole/guacamole.properties
　mysql-driver: mariadb
　mysql-ssl-mode: required
　mysql-ssl-trust-store: /opt/jks/xxxx.jks
　mysql-ssl-trust-password: XXXXXXXX

Using MySQL Connector/J, SSL connection was possible from Guacamole with the same settings.

The default setting for MariaDB Connector/J seems to be useSsl = false.
https://mariadb.com/kb/en/about-mariadb-connector-j/#tls-parameters

Also, by changing the following sources
SSL communication was successful as expected.
{code:java}
// guacamole-client-1.2.0/extensions/guacamole-auth-jdbc/modules/guacamole-auth-jdbc-mysql/src/main/java/org/apache/guacamole/auth/mysql/MySQLAuthenticationProviderModule.java

// Change before
 90         // For compatibility, set legacy useSSL property when SSL is disabled.
 91         if (sslMode == MySQLSSLMode.DISABLED)
 92             driverProperties.setProperty("useSSL", "false");

// Change after
 90         // For compatibility, set legacy useSSL property when SSL is disabled.
 91         if (sslMode == MySQLSSLMode.DISABLED) {                 //** Add
 92             driverProperties.setProperty("useSSL", "false");
 93         } else {                                                //** Add
 94             driverProperties.setProperty("useSSL", "false");    //** Add
 95         }                                                       //** Add
{code}
I would like to submit a pull request with changes.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)