Connections created using transient SSL params should not be stored in the global DBConnectionPool - security risk

XMLWordPrintableJSON

    • Fully Compatible
    • Sharding 2021-01-25, Sharding 2021-02-22
    • None
    • 3
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      The global DBConnectionPool keeps reusable connections. If a connection was created using transient SSL params, it should not be recycled into this pool, because it can be picked from some other code logic and that will be a security risk.

              Assignee:
              Andrew Shuvalov (Inactive)
              Reporter:
              Andrew Shuvalov (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: