I give up… the problem is definitely yours and not xojo’s but I don’t know how to help you anymore, sorry. We’ll see if anyone else on the forum has ideas.
have a good evening
indeed I give up as well, I ended reinstalling a new server, and installing the repo version which is [quote]Server version: 10.3.22-MariaDB-0+deb10u1-log Debian 10[/quote] and it worked like a charm, on the latest one does not want and that’s it ,at least i know how to treat it in the future
Thanks again for all your help.
ok , so after some digging I find out that 10.4.13 has [quote]version_ssl_library | OpenSSL 1.1.1d 10 Sep 2019 [/quote] while 10.3.22 has [quote]version_ssl_library | YaSSL 2.4.4 [/quote] so if same OS , Debian 10, same config on the MariaDB side, identical, on 10.4 does not work, on 10.3 it works perfectly.
Now, if I enable tls_version or ssl-cipher on the old one then it does not work anymore and I get exactly the same error on both of them .
While I can connect to 10.3 when I check the connection status , I get [quote]Ssl_version : TLSv1[/quote] but I guess is more generic as it does no say the exact version so I have no idea if what is used now is correct of a possible security issue. while if I connect from other linux to the 10.4 my ssl version would be [quote]Ssl_version | TLSv1.3[/quote] so I guess a more up to date one.
Is it possible that the XOJO driver has a limited connectivity ? and it cannot fulfill all the TLS versions ? or is it related to the openssl library ?
I already told you that the xojo driver tries to connect to TLS1.0/TLS1.1. You must add the option
tls_version = TLSv1.0,TLSv1.1,TLSv1.2,TLSv1.3
you mariadb 10.4 because protocols 1.0 and 1.1 are disabled
Alternative way would be to use MBS Xojo SQL Plugin and connect there to MySQL/MariaDB with SSL.
[quote=490257:@Attilio Punzi]I already told you that the xojo driver tries to connect to TLS1.0/TLS1.1. You must add the option
tls_version = TLSv1.0,TLSv1.1,TLSv1.2,TLSv1.3
you mariadb 10.4 because protocols 1.0 and 1.1 are disabled[/quote]
Well are not those 2 supposed to be deprecated and not secure anymore ? what is the purpose of using a security scheme if what you use is useless ? I guess if XOJO is limited to that , it better be changed asap to the more up to date one.
[quote=490264:@Christian Schmitz]Alternative way would be to use MBS Xojo SQL Plugin and connect there to MySQL/MariaDB with SSL.
see MySQL with SSL in MBS Xojo SQL Plugin[/quote]
Hi Christian, I was taking that in consideration as well as last resort . Thanks.
I never said you didn’t. So much so that in my last forum post I asked when this problem would be fixed. We should open a feedback and see if they take it into consideration. For now I don’t worry too much because I only use SSL for some internal connections. If you want to open your database to the internet it’s not a good thing. I saw that you’ve been registered for 10 years, I thought you were a new user… You are free to change if you wish!