MySQL客户端的--ssl选项之前允许而非强制使用SSL连接，这可能导致安全风险。在MySQL 5.7.3中，--ssl选项被重新定义为要求SSL连接，增强了网络通信的安全性。同时，libmysql添加了MYSQL_OPT_SSL_ENFORCE选项以支持类似的行为。此更改源于对CVE-2015-3152漏洞的修复。
Redefining –ssl option
MySQL clients have long had a –ssl option. Casual users may think specifying this option will cause clients to secure connections using SSL. That is not the case:
D:\mysql-5.6.13-winx64>bin\mysql -uroot -P3307 --ssl
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 2
Server version: 5.6.13-log MySQL Community Server (GPL)
Copyright (c) 2000, 2013, Oracle and/or its affiliates. All rights reserved.
Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
mysql> \s
--------------
bin\mysql Ver 14.14 Distrib 5.6.13, for Win64 (x86_64)
Connection id: 2
Current database
最低0.47元/天 解锁文章
5184
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
