From: Tim Gustafson
Date: February 25 2011 12:21am
Subject: Problems Connecting with SSL
List-Archive: http://lists.mysql.com/mysql/224505
Message-Id: <1408975760.8158.1298593276961.JavaMail.root@mail-01.cse.ucsc.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

I have three mySQL server, all of which are SSL-enable and all of which are generally accessible from remote clients over SSL.

However, one of my FreeBSD mySQL clients is having problems connecting to any of the servers.  Running mySQL under truss reports the following:

----------
clock_gettime(13,{1298593067.000000000 })	 = 0 (0x0)
open("/dev/urandom",O_RDONLY,00)		 = 4 (0x4)
read(4,"\a\^V\M-)\^C\M-L{`\M^O\M^@\M-v"...,32)	 = 32 (0x20)
sendto(2,"\^V\^C\^A\0Y\^A\0\0U\^C\^A\M-m"...,94,0x0,NULL,0x0) = 94 (0x5e)
recvfrom(2,"\^V",1,0x2,NULL,0x0)		 = 1 (0x1)
ioctl(2,FIONREAD,0xffffd784)			 = 0 (0x0)
recvfrom(2,"\^V\^C\^A\0J\^B\0\0F\^C\^AMf\M-u"...,1819,0x0,NULL,0x0) = 1819 (0x71b)
clock_gettime(13,{1298593067.000000000 })	 = 0 (0x0)
clock_gettime(13,{1298593067.000000000 })	 = 0 (0x0)
gettimeofday({1298593067.844592 },0x0)		 = 0 (0x0)
sendto(2,"\^V\^C\^A\0F\^P\0\0B\0@\M-B\M^Y"...,134,0x0,NULL,0x0) = 134 (0x86)
recvfrom(2,"\^U",1,0x2,NULL,0x0)		 = 1 (0x1)
ioctl(2,FIONREAD,0xffffd784)			 = 0 (0x0)
recvfrom(2,"\^U\^C\^A\0\^B\^B\n\^V\0\0\^B"...,33,0x0,NULL,0x0) = 33 (0x21)
close(3)					 = 0 (0x0)
shutdown(2,SHUT_RDWR)				 = 0 (0x0)
close(2)					 = 0 (0x0)
fstat(1,{ mode=crw--w---- ,inode=113,size=0,blksize=4096 }) = 0 (0x0)
ioctl(1,TIOCGETA,0xffffe390)			 = 0 (0x0)
write(2,"ERROR 2026 (HY000): ",20)		 ERR#9 'Bad file descriptor'
write(2,"SSL connection error",20)		 ERR#9 'Bad file descriptor'
write(2,"\n",1)					 ERR#9 'Bad file descriptor'
write(1,"\a",1)					 = 1 (0x1)
close(4)					 = 0 (0x0)
process exit, rval = 1
----------

Can anyone tell me, based on the truss output above, what might be going wrong?  I'm using the exact same command line options and ssl-ca file that I am using on other clients, which can connect successfully.

(As an aside: feature request: better SSL connection debugging, please!)

Tim Gustafson
Baskin School of Engineering
UC Santa Cruz
tjg@stripped
831-459-5354