Bug #34020 Add ODBC DSN option to verify server certificate when using SSL
Submitted: 23 Jan 2008 20:52 Modified: 23 Feb 2008 3:20
Reporter: Jess Balint Email Updates:
Status: Duplicate Impact on me:
None 
Category:Connector / ODBC Severity:S4 (Feature request)
Version:5.1 OS:Any
Assigned to: Bogdan Degtyariov CPU Architecture:Any
Tags: SSL

[23 Jan 2008 20:52] Jess Balint
Description:
This additional validation is available through libmysql, and should be available as an option in ODBC. Description from docs:

MYSQL_OPT_SSL_VERIFY_SERVER_CERT
Enable or disable verification of the server's Common Name value in its certificate against the hostname used when connecting to the server. The connection is rejected if there is a mismatch. This feature can be used to prevent man-in-the-middle attacks. Verification is disabled by default. Added in MySQL 5.0.23.

How to repeat:
.
[23 Feb 2008 3:20] Jess Balint
Duplicate of bug#34648