maria-discuss team mailing list archive

Thread
Date

ECDHE ciphers PHP->MariaDB

To: Mailing-List mariadb <"maria-discuss"@lists.launchpad.net>
From: Reindl Harald <h.reindl@xxxxxxxxxxxxx>
Date: Tue, 15 Oct 2013 23:19:23 +0200
Openpgp: id=7F780279; url=http://arrakis.thelounge.net/gpg/h.reindl_thelounge.net.pub.txt
Organization: the lounge interactive design
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.0

Hi

is it PHP'sd mysqli/mysqlnd or MySQL/MariaDB which is resposible that no
ECDHE-ciphers are used? below ends in TLSv1 with DHE-RSA-AES128-SHA

* MariaDB as well as PHP/Apache compiled with a ECDHE supporting
  OpenSSL, proven by https://www.ssllabs.com/ssltest/ as well
  as Postfix/Dovecot logs compiled against the same openssl-build

* Fedora 19 with https://bugzilla.redhat.com/show_bug.cgi?id=319901#c108
  home-made build

$this->conn->ssl_set($this->ssl_key, $this->ssl_crt, $this->ssl_ca, NULL,
'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA');

Attachment: signature.asc
Description: OpenPGP digital signature