Re: 5.3.7 is breaking SSL
Am 23.08.2011 19:21, schrieb Scott MacVicar:
> On Aug 17, 2011, at 5:50 PM, Reindl Harald wrote:
>
>> well i guess it is the change below this results in connections in hanging
>> around and after a hughe timeout filling my mailbox with cron-mails:
>>
>> mysqlnd 5.0.8-dev - 20102224 - $Revision: 310735 $
>>
>> without ssl_set() all works fine but unencyrpted :-(
>> ___________
>>
>> MySQL server has gone away
>>
>> $this->ssl_key = '/etc/mysql-ssl/client.pem';
>> $this->ssl_crt = '/etc/mysql-ssl/client.pem';
>> $this->ssl_ca = '/etc/mysql-ssl/ca.crt';
>>
>> $>conn->ssl_set($this->ssl_key, $this->ssl_crt, $this->ssl_ca, NULL, NULL);
>> ___________
>>
>> https://bugs.php.net/bug.php?id=55283
>>
>> - MySQLi extension:
>> . Fixed bug #55283 (SSL options set by mysqli_ssl_set ignored for MySQLi
>> persistent connections). (Andrey)
>>
>>
>
>
> Do you have a full script I can use to look at? Do you set a mysql timeout?
wtah exactly are you mssing?
the code is above and timeouts does not matter if it takes 30 minutes
before "mysql server has gone" what leads to take a long time to
recognize that cronjobs are defacto dead
$conn = mysqli_init();
$conn->ssl_set
(
'/etc/mysql-ssl/client.pem',
'/etc/mysql-ssl/client.pem',
'/etc/mysql-ssl/ca.crt',
NULL,
NULL
);
mysqli_real_connect($conn, $host, $user, $pwd, $db, port, '', 0);
this code is packed in a abstraction-layer which calls finally
mysqli_connect_error() to display "mysql server has gone away"
PHP 5.3.8 is fixing this as far as i see on the first test machine
"Ssl_cipher DHE-RSA-AES256-SHA" instead dead and timeout
* Reverted a change in timeout handling restoring PHP 5.3.6
behavior, which caused mysqlnd SSL connections to hang (Bug
#55283).
Attachment: [application/pgp-signature] OpenPGP digital signature signature.asc
Thread (6 messages)