Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add require_secure_transport #15306

Closed
kolbe opened this issue Mar 11, 2020 · 0 comments · Fixed by #15341
Closed

Add require_secure_transport #15306

kolbe opened this issue Mar 11, 2020 · 0 comments · Fixed by #15341
Labels
type/enhancement The issue or PR belongs to an enhancement.

Comments

@kolbe
Copy link
Contributor

kolbe commented Mar 11, 2020

Feature Request

Is your feature request related to a problem? Please describe:

We should add support for a require_secure_transport startup option that matches the behavior of MySQL Server:

https://dev.mysql.com/doc/refman/5.7/en/server-system-variables.html#sysvar_require_secure_transport

https://dev.mysql.com/doc/refman/5.7/en/using-encrypted-connections.html#mandatory-encrypted-connections

Describe the feature you'd like:

"With require_secure_transport enabled, client connections to the server are required to use some form of secure transport, and the server permits only TCP/IP connections that use SSL, or connections that use a socket file (on Unix) or shared memory (on Windows). The server rejects nonsecure connection attempts, which fail with an ER_SECURE_TRANSPORT_REQUIRED error."

Describe alternatives you've considered:

Without a require_secure_transport setting, an administrator must be careful to create all users with a REQUIRE TLS/ISSUE/CIPHER/etc. clause.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
type/enhancement The issue or PR belongs to an enhancement.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant