MySQL Bugs: #82872: Add TLS SNI support to the client. (contribution)

Bug #82872	Add TLS SNI support to the client. (contribution)
Submitted:	6 Sep 2016 15:57	Modified:	6 Sep 2016 17:29
Reporter:	OCA Admin (OCA)	Email Updates:
Status:	Verified	Impact on me:	None
Category:	MySQL Server: Connection Handling	Severity:	S4 (Feature request)
Version:		OS:	Any
Assigned to:		CPU Architecture:	Any

Description:
This bug tracks a contribution by Felipe Gasper (Github user: FGasper) as described in http://github.com/mysql/mysql-server/pull/95

How to repeat:
See description

Suggested fix:
See contribution code attached

Contribution submitted via Github - Add TLS SNI support to the client. (*) Contribution by Felipe Gasper (Github FGasper, mysql-server/pull/95#issuecomment-244937769): I confirm the code being submitted is offered under the terms of the OCA, and that I am authorized to contribute it. -FG > On 6 Sep 2016, at 6:48 AM, mysql-oca-bot <notifications@github.com> wrote: > > I confirm the code being submitted is offered under the terms of the OCA, and that I am authorized to contribute it.

Contribution: git_patch_84047081.txt (text/plain), 5.48 KiB.

Thank you for the contribution.

Thank you for taking the time to contribute this code. But I'm afraid it's of not much use for the wider audience without at least some level of server support.

It is useful even without server support: It allows a proxy to choose a correct backend connection.

An exemple of use case is Mysql on Openshift or any other infra with haproxy in front.

Please integrate this change as a lot of people in cloud environment using a different kind of proxies and it would be very useful to have this ability to route by SNI.

Any news on this feature ? Thanks

Related:
Bug #84849
Bug #104649

From https://dev.mysql.com/doc/relnotes/mysql/8.1/en/news-8-1-0.html

"MySQL now implements client-side Server Name Indication (SNI), which is an extension to the TLS protocol. Client applications can pass a server name to the libmysqlclient C API library with the new MYSQL_OPT_TLS_SNI_SERVERNAME option for mysql_options(). Similarly, each MySQL client program now includes a --tls-sni-servername command option to pass in a name. The new Tls_sni_server_name server status variable indicates the name if one is set for the session. Our thanks to Meta for the contribution. (Bug #33176362, WL #14839)"