AW: AW: mariadb TLS/SSL error

["Wim Geraets" <it@xxxxxx>]

It seems the option is not accepted in this mariadb-connector...

(Unable to disable TLS verification when using mariadb-connector-c >= 3.4.0
https://github.com/brianmario/mysql2/issues/1379)

This issue is present in OpenSUSE 15.6, 16.0 and Tumbleweed, I do not know which other distributions use this connector
(in debian-based distros, eg Raspbian, I see another version numbering scheme for the mariadb client lib, it follows the mariadb version).


But there is a way around with indeed the options (lots of), combined with a special config file entry:

My own ~/.my.cfg file already contained the entry to let my CLI mariadb -h -u .. work without SSL-error:

  [client]
  skip-ssl = true

I had to add: (title of the entry is free; to be called from your Gambas code)

  [gambasfixnossl]
  ssl-verify-server-cert=0 
  ssl-mode=DISABLED


Then I extended my Gambas hConnection code with these options:

  .Options["READ_DEFAULT_GROUP"] = "gambasfixnossl" 
  .Options["PROTOCOL"] = 1
  .Options["SSL_MODE"] = 0 
  .Options["SSL"] = False
  .Options["CLIENT_FLAGS"] = 0  
  .Options["MYSQL_OPT_SSL_ENFORCE"] = 0  


Complete it looks like:

  With hConnection
    .Host = Settings["Connection/Host"]
    .User = Settings["Connection/User"]
    .Name = Settings["Connection/Name"]
    .Password = Settings["Connection/Password"]
    .Type = Settings["Connection/Type", "mysql"]
    .Options["READ_DEFAULT_GROUP"] = "gambasfixnossl"
    .Options["PROTOCOL"] = 1
    .Options["SSL_MODE"] = 0 
    .Options["SSL"] = False
    .Options["CLIENT_FLAGS"] = 0  
    .Options["MYSQL_OPT_SSL_ENFORCE"] = 0  
  End With


Now it works fine, tested on 

- OpenSUSE Leap 16.0 with Gambas 3.20.99
- OpenSUSE Tumbleweed with Gambas 3.21.0 (indeed)

It probably is not only a problem for Gambas, but for all software (python, libreoffice .. ) using this connector to a local non-ssl mariadb server.

Wim.


-----Oorspronkelijk bericht-----
> Afzender: Benoît Minisini <benoit.minisini@xxxxxxxxxxxxxxxx>
> Verstuurd: Vrijdag 26 September 2025 16:29
> Aan: user@xxxxxxxxxxxxxxxxxxxxxx
> Onderwerp: Re: AW: mariadb TLS/SSL error
> 
> Le 26/09/2025 à 16:25, Wim Geraets a écrit :
> > I used .Options["SSL_MODE"] = "disabled" before making the connection.
> > 
> > But it doesn't change anything on the mariadb error.
> > 
> > I'm not used reading c sources, so I don't know how to check the possible
> values.
> > 
> > 
> > I installed the environment variable in my environment, tested:
> > 
> > echo $GB_DB_MYSQL_NOSSL
> > 1
> > 
> > This doesn't change the connection error from the gambas3 program.
> > (Also keeps the error on the commandline interface manual login on mariadb).
> > 
> > 
> > 
> > Wim
> > 
> 
> I am not aware of any other MySQL connection option to disable ssl.
> 
> I'd like to know what exactly does the mariadb '--skip_ssl' option then...
> 
> -- 
> Benoît Minisini.
> 
> 
> 
>