MyDac and SSL

Discussion of open issues, suggestions and bugs regarding MyDAC (Data Access Components for MySQL) for Delphi, C++Builder, Lazarus (and FPC)
Post Reply
egrobler
Posts: 29
Joined: Mon 03 Dec 2012 14:35

MyDac and SSL

Post by egrobler » Wed 10 Feb 2021 16:35

Hi Everyone,

I have a user defined with REQUIRE SSL on a MariaDb Server.

When I connect with a SQLYog client using client CERT/KEYS and I run
SHOW SESSION STATUS LIKE "Ssl_cipher" I get

Code: Select all

DHE-RSA-AES256-SHA
as ecpected.


Using MyDAC: (with libeay32.dll, ssleay32.dll from 2018, works in Indy)

Code: Select all

     
      aCon := TMyConnection.Create(nil);
      aCon.Username := 'xxx';
      aCon.Password := 'xxx';
      aCon.Options.Protocol := mpSSL;
      aCon.SSLOptions.CipherList := 'DHE-RSA-AES256-SHA....';
      aCon.SSLOptions.CACert := 'ca-cert.pem';
      aCon.SSLOptions.Key := 'client-key.pem';
      aCon.SSLOptions.Cert := 'client-cert.pem';
The MyDac code above connects to the server using SSL but it ignores the client certificates and
SHOW SESSION STATUS LIKE "Ssl_cipher" just rerturns a generic value: "Ssl_cipher".

In other words, Protocol := mpSSL creates a working SSL connection but it does not use the client certificates.
I am using the latest MyDac version (10.3.2 14) with Delphi 10.4

Any help/suggestions would be appreciated.

ViktorV
Devart Team
Posts: 2963
Joined: Wed 30 Jul 2014 07:16

Re: MyDac and SSL

Post by ViktorV » Thu 11 Feb 2021 13:09

Unfortunately, we could not reproduce the issue.
In order for us to be able to give you a detailed answer, please compose a small sample demonstrating the described behavior with permanent test access including all the required files and send it to us using contact form https://devart.com/company/contactform.html

egrobler
Posts: 29
Joined: Mon 03 Dec 2012 14:35

Re: MyDac and SSL

Post by egrobler » Mon 15 Feb 2021 08:55

Thankyou for your response, I submitted a detailed example.

ViktorV
Devart Team
Posts: 2963
Joined: Wed 30 Jul 2014 07:16

Re: MyDac and SSL

Post by ViktorV » Wed 17 Feb 2021 13:20

Unfortunately, we have not received any letters from your e-mail. Try submitting your example again.

egrobler
Posts: 29
Joined: Mon 03 Dec 2012 14:35

Re: MyDac and SSL

Post by egrobler » Wed 17 Feb 2021 16:41

Hi Victor,

Thanks for your notice.

I tried again, I got the message "Thank you for your feedback. You will receive a reply shortly..." but I have not received any confirmation. (It might be because I have ssl dll files inside the attachment?)

I decided to send an email directly to support@devart.com using another email: eric.grobler@vvr.de

Is that ok?

Regards
Eric Grobler

ViktorV
Devart Team
Posts: 2963
Joined: Wed 30 Jul 2014 07:16

Re: MyDac and SSL

Post by ViktorV » Fri 19 Feb 2021 10:28

We have received your example answered you via e-mail.

Post Reply