Open
Description
- A clear description of the issue
If a client tries to establish an SSL connection without specifying any certificate, proxysql will log an error
- ProxySQL version
2.1.1 and newer.
But introduced in #3343
- OS version
Any
- The steps to reproduce the issue
Start proxysql with enabled SSL (for example running SET mysql-have_ssl='true'; load mysql variables to runtime;
.
Then use any client to establish an SSL connection without certificate. For example:
mysql -u sbtest -psbtest -h 127.0.0.1 -P6033 --ssl-mode=required
- The full ProxySQL error log (default location:
/var/lib/proxysql/proxysql.log
)
The full error log is irrelevant.
The specific error message is:
2021-04-28 20:54:55 mysql_data_stream.cpp:189:do_ssl_handshake(): [ERROR] X509 error: no required certificate sent by client
Suggested changes:
The error here doesn't seem correct. The certificate is not required.
It should be replaced with a warning, and the warning itself should be toggled on or off using a new global variable.