Skip to content

Commit 240f24a

Browse files
committed
BUG#33177337: Connection with chained SSL certs fails with ssl_verify_identity
This patch fixes the failing C extension connection with chained SSL certificates using ssl_verify_identity=True.
1 parent fd21d47 commit 240f24a

File tree

2 files changed

+5
-5
lines changed

2 files changed

+5
-5
lines changed

CHANGES.txt

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,7 @@ v8.0.27
1313

1414
- WL#14689: Fallback conversion to str for types incompatible with MySQL
1515
- WL#14664: Allow SSPI Kerberos library usage with c-ext
16+
- BUG#33177337: Connection with chained SSL certs fails with ssl_verify_identity
1617
- BUG#28641350: mysqlx.result.Row objects cannot be printed directly
1718

1819
v8.0.26

src/mysql_capi.c

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1293,13 +1293,12 @@ MySQL_connect(MySQL *self, PyObject *args, PyObject *kwds)
12931293
mysql_options(&self->session,
12941294
MYSQL_OPT_SSL_VERIFY_SERVER_CERT, (char*)&abool);
12951295
#endif
1296-
} else {
12971296
#if MYSQL_VERSION_ID >= 50711
1298-
if (ssl_verify_identity && ssl_verify_identity == Py_True) {
1299-
ssl_mode= SSL_MODE_VERIFY_IDENTITY;
1300-
mysql_options(&self->session, MYSQL_OPT_SSL_MODE, &ssl_mode);
1301-
}
1297+
} else if (ssl_verify_identity && ssl_verify_identity == Py_True) {
1298+
ssl_mode= SSL_MODE_VERIFY_IDENTITY;
1299+
mysql_options(&self->session, MYSQL_OPT_SSL_MODE, &ssl_mode);
13021300
#endif
1301+
} else {
13031302
ssl_ca= NULL;
13041303
}
13051304
mysql_ssl_set(&self->session, ssl_key, ssl_cert, ssl_ca, NULL, NULL);

0 commit comments

Comments
 (0)