Re: AW: AW: mariadb TLS/SSL error

[Benoît Minisini <benoit.minisini@xxxxxxxxxxxxxxxx>]

Le 16/10/2025 à 13:48, Wim Geraets a écrit :
> It seems the option is not accepted in this mariadb-connector...
>
> (Unable to disable TLS verification when using mariadb-connector-c >= 3.4.0
> https://github.com/brianmario/mysql2/issues/1379)
>
> This issue is present in OpenSUSE 15.6, 16.0 and Tumbleweed, I do not know which other distributions use this connector
> (in debian-based distros, eg Raspbian, I see another version numbering scheme for the mariadb client lib, it follows the mariadb version).
>
>
> But there is a way around with indeed the options (lots of), combined with a special config file entry:
>
> My own ~/.my.cfg file already contained the entry to let my CLI mariadb -h -u .. work without SSL-error:
>
>    [client]
>    skip-ssl = true
>
> I had to add: (title of the entry is free; to be called from your Gambas code)
>
>    [gambasfixnossl]
>    ssl-verify-server-cert=0
>    ssl-mode=DISABLED
>
>
> Then I extended my Gambas hConnection code with these options:
>
>    .Options["READ_DEFAULT_GROUP"] = "gambasfixnossl"
>    .Options["PROTOCOL"] = 1
>    .Options["SSL_MODE"] = 0
>    .Options["SSL"] = False
>    .Options["CLIENT_FLAGS"] = 0
>    .Options["MYSQL_OPT_SSL_ENFORCE"] = 0
>
>
> Complete it looks like:
>
>    With hConnection
>      .Host = Settings["Connection/Host"]
>      .User = Settings["Connection/User"]
>      .Name = Settings["Connection/Name"]
>      .Password = Settings["Connection/Password"]
>      .Type = Settings["Connection/Type", "mysql"]
>      .Options["READ_DEFAULT_GROUP"] = "gambasfixnossl"
>      .Options["PROTOCOL"] = 1
>      .Options["SSL_MODE"] = 0
>      .Options["SSL"] = False
>      .Options["CLIENT_FLAGS"] = 0
>      .Options["MYSQL_OPT_SSL_ENFORCE"] = 0
>    End With
>
>
> Now it works fine, tested on
>
> - OpenSUSE Leap 16.0 with Gambas 3.20.99
> - OpenSUSE Tumbleweed with Gambas 3.21.0 (indeed)
>
> It probably is not only a problem for Gambas, but for all software (python, libreoffice .. ) using this connector to a local non-ssl mariadb server.
>
> Wim.

Thanks for the information. I think this should be somewhere in the wiki...

--
Benoît Minisini.