Bug #18195 MySQL on Windows not built with YaSSL correctly
Submitted: 13 Mar 2006 16:44 Modified: 16 Mar 2006 16:29
Reporter: Mike Gent Email Updates:
Status: Closed Impact on me:
None 
Category:MySQL Server: Compiling Severity:S2 (Serious)
Version:5.0.19 OS:Windows (Windows)
Assigned to: Magnus Blåudd CPU Architecture:Any

[13 Mar 2006 16:44] Mike Gent
Description:
The MySQL FAQ for SEC 1 and 2 say that most MySQL binaries have SSL support, but under Windows it will not work. The problem is that 2 definitions are missing in the Visual Studio files (.sln, .vcproj).

A custom build with the suggested fix will result in binaries and libraries that meet the security needs as well as match up to what's being advertised.

How to repeat:
mysqld --ssl-ca=CA-cert.pem --ssl-cert=Localhost-cert.pem --ssl-key=Localhost-key.pem

060313 10:38:52 [ERROR] mysqld: unknown variable 'ssl-ca=CA-cert.pem'  

Suggested fix:
For each of the solution components, enable HAVE_OPENSSL and HAVE_YASSL under Configuration Properties -> C/C++ -> Preprocessor -> Preprocessor Definitions.

libmysql
libmysqld
mysql
mysqladmin
mysqlbinlog
mysqlcheck
mysqlclient
mysqld
mysqldump
mysqlimport
mysqlmanager
mysqlshow
mysqltest
test_libmysqld
vio
[14 Mar 2006 1:20] MySQL Verification Team
Thank you for the bug report.

From the Manual:

5.8.7.3. Using yaSSL
Using MySQL's built-in yaSSL support makes it easier to use secure connections. You don't have to install
OpenSSL and perform the other steps described in Section 5.8.7.2, “Requirements (OpenSSL)”.
Also, both MySQL and yaSSL employ the same licensing model.
Currently, yaSSL support is available for these platforms:
• Linux/x86-64 Red Hat Enterprise 3.0
• Linux RHAS21 Itanium-2 with gcc, statically linked
• Linux Itanium-2 with gcc
• Windows (all builds)
^^^^^^^^^^^^^^^^
[14 Mar 2006 13:52] Bugs System
A patch for this bug has been committed. After review, it may
be pushed to the relevant source trees for release in the next
version. You can access the patch from:

  http://lists.mysql.com/commits/3827
[15 Mar 2006 7:54] Jim Winstead
Looks okay to push to me.
[16 Mar 2006 9:38] Magnus Blåudd
Pushed to 5.0.20
[16 Mar 2006 12:44] Magnus Blåudd
This patch was built in pushbuild and all the SSL related testcases passed.
[16 Mar 2006 15:47] Magnus Blåudd
Pushed to 5.1.8
[16 Mar 2006 15:48] Magnus Blåudd
Windows builds will now have SSL support enabled.
[16 Mar 2006 16:29] Paul DuBois
Noted in 5.0.20, 5.1.8 changelogs.

Windows builds now have SSL support enabled. (Bug#18195)
[16 Nov 2007 18:45] Mark Bestland
Using (for trials) MySQL 5.04.45-Community-NT MySQL Community Build.

My build was not built with SSL , The HAVE_SSL variables say 'NO'.
Is there a way to incorporate YaSSL into my server for trials ?

Thank you.