Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

caching_sha2_password should not require SSL #313

Open
anarthal opened this issue Jul 11, 2024 · 3 comments
Open

caching_sha2_password should not require SSL #313

anarthal opened this issue Jul 11, 2024 · 3 comments
Labels
enhancement New feature or request

Comments

@anarthal
Copy link
Collaborator

We can request the server's public key and encrypt the password with it instead of failing the operation. This requires a significant refactor in the handshake code.

@anarthal anarthal added the enhancement New feature or request label Jul 11, 2024
@vlaben
Copy link

vlaben commented Jul 13, 2024

My game server sending data to database via DLL would benefit from this improvement :)
(the game server and the MySQL server runs on the same machine).

An encrypted connection on a local network would be overkill IMHO -
an unencrypted connection established using an RSA key pair for
password exchange would satisfy caching_sha2_password
requirements (win - TCP/IP).

Right now, we still have the option to use mysql_native_password,
even after changes 8.4. However, this option is deprecated.

In other words - implementing this enhancement would be a great solution
in a local network client-server scenario, where the default authentication
plugin is used, but an unencrypted connection is preferred.

One more important thing - Thank you sir for all your work. 🥇
I really appreciate the library!

@anarthal
Copy link
Collaborator Author

Thanks.

It's actually removed in 9.0, which is causing terrible pain in CIs.

I agree that'd be useful in your case, but if you're doing Windows specific stuff, you'll find named pipes (#89) faster. Which I should code someday, too :)

@anarthal
Copy link
Collaborator Author

Anyway, thanks for pointing out your need - I need more users like you :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants