Skip to content

*Breaking* Remove SSL settings from default_options#1714

Open
cruelsmith wants to merge 1 commit into
puppetlabs:mainfrom
pixelpark:fix/mariadb_11x_defaults
Open

*Breaking* Remove SSL settings from default_options#1714
cruelsmith wants to merge 1 commit into
puppetlabs:mainfrom
pixelpark:fix/mariadb_11x_defaults

Conversation

@cruelsmith

@cruelsmith cruelsmith commented Jul 1, 2026

Copy link
Copy Markdown
Contributor

Summary

⚠️ This change is not backwards compatible, as it alters the default settings. Affected users may need to check the server::override_options setting and adjust it to suit their requirements.

Changes the $default_options in params.pp to relay on the default on the binaries of mysql and mariadb.

Removes undocumented ssl-disable handling in templates/my.cnf.epp. Users should set unwanted values to undef instead.

Additional Context

Add any additional context about the problem here.

  • Root cause and the steps to reproduce. (If applicable)
  • Thought process behind the implementation.

Related Issues (if any)

Closes #1670
Closes #1674

Checklist

  • 🟢 Spec tests.
  • 🟢 Acceptance tests.
  • Manually verified. (via pupept on RHEL9 with MariaDB 12.3)

@cruelsmith cruelsmith requested review from a team, alexjfisher and bastelfreak as code owners July 1, 2026 22:58
@cruelsmith cruelsmith marked this pull request as draft July 1, 2026 23:06
@cruelsmith cruelsmith force-pushed the fix/mariadb_11x_defaults branch 2 times, most recently from f4cfe72 to adc715d Compare July 2, 2026 10:28
@cruelsmith cruelsmith changed the title Enable per default the mariadb >= 11.4 zero configuration ssl *Breaking* Remove SSL settings from default_options Jul 2, 2026
* MariaDB <= 11.4 had SSL disabled per default.
* MariaDB >= 11.4 enabled zero config ssl
** See https://mariadb.org/mission-impossible-zero-configuration-ssl
* MySQL 8.4 brings selfsinged certs and fallsback to no ssl per
  default.
@cruelsmith cruelsmith force-pushed the fix/mariadb_11x_defaults branch from adc715d to 119c271 Compare July 2, 2026 11:35
@cruelsmith cruelsmith marked this pull request as ready for review July 2, 2026 11:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

MySQL 8.4 removed ssl configuration keyword "TLS/SSL error: SSL is required, but the server does not support it" in Debian Trixie

1 participant