1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
|
include/master-slave.inc
Warnings:
Note #### Sending passwords in plain text without SSL/TLS is extremely insecure.
Note #### Storing MySQL user name or password information in the connection metadata repository is not secure and is therefore not recommended. Please consider using the USER and PASSWORD connection options for START REPLICA; see the 'START REPLICA Syntax' in the MySQL Manual for more information.
[connection master]
include/assert.inc [Master_SSL_Allowed should be NO by default]
include/assert.inc [Without MASTER_SSL, the slave should be connected to the master without SSL/TLS]
create user replssl@localhost require ssl;
grant replication slave on *.* to replssl@localhost;
create table t1 (t int auto_increment, KEY(t));
include/sync_slave_sql_with_master.inc
stop slave;
Warnings:
Warning 1287 'STOP SLAVE' is deprecated and will be removed in a future release. Please use STOP REPLICA instead
CHANGE REPLICATION SOURCE to
SOURCE_USER='replssl',
SOURCE_PASSWORD='',
SOURCE_SSL=1,
SOURCE_SSL_CA ='MYSQL_TEST_DIR/std_data/cacert.pem',
SOURCE_SSL_CERT='MYSQL_TEST_DIR/std_data/client-cert.pem',
SOURCE_SSL_KEY='MYSQL_TEST_DIR/std_data/client-key.pem';
Warnings:
Note #### Sending passwords in plain text without SSL/TLS is extremely insecure.
Note #### Storing MySQL user name or password information in the connection metadata repository is not secure and is therefore not recommended. Please consider using the USER and PASSWORD connection options for START REPLICA; see the 'START REPLICA Syntax' in the MySQL Manual for more information.
start slave;
Warnings:
Warning 1287 'START SLAVE' is deprecated and will be removed in a future release. Please use START REPLICA instead
insert into t1 values(1);
include/sync_slave_sql_with_master.inc
select * from t1;
t
1
Master_SSL_Allowed = 'Yes'
Master_SSL_CA_Path = ''
Master_SSL_CA_File = 'MYSQL_TEST_DIR/std_data/cacert.pem'
Master_SSL_Cert = 'MYSQL_TEST_DIR/std_data/client-cert.pem'
Master_SSL_Key = 'MYSQL_TEST_DIR/std_data/client-key.pem'
include/check_slave_is_running.inc
STOP SLAVE;
Warnings:
Warning 1287 'STOP SLAVE' is deprecated and will be removed in a future release. Please use STOP REPLICA instead
select * from t1;
t
1
insert into t1 values (NULL);
include/sync_slave_sql_with_master.inc
include/wait_for_slave_to_start.inc
Master_SSL_Allowed = 'Yes'
Master_SSL_CA_Path = ''
Master_SSL_CA_File = 'MYSQL_TEST_DIR/std_data/cacert.pem'
Master_SSL_Cert = 'MYSQL_TEST_DIR/std_data/client-cert.pem'
Master_SSL_Key = 'MYSQL_TEST_DIR/std_data/client-key.pem'
include/check_slave_is_running.inc
drop user replssl@localhost;
drop table t1;
include/sync_slave_sql_with_master.inc
include/stop_slave.inc
CHANGE REPLICATION SOURCE TO
SOURCE_USER = 'root',
SOURCE_SSL = 0,
SOURCE_SSL_CA = '',
SOURCE_SSL_CERT = '',
SOURCE_SSL_KEY = '',
SOURCE_SSL_CRL='',
SOURCE_SSL_CRLPATH='';
Warnings:
Note #### Sending passwords in plain text without SSL/TLS is extremely insecure.
Note #### Storing MySQL user name or password information in the connection metadata repository is not secure and is therefore not recommended. Please consider using the USER and PASSWORD connection options for START REPLICA; see the 'START REPLICA Syntax' in the MySQL Manual for more information.
CHANGE REPLICATION SOURCE TO SOURCE_SSL= 1, SOURCE_SSL_CRL='MYSQL_TEST_DIR/std_data/crl-client-revoked.crl', SOURCE_SSL_CRLPATH='MYSQL_TEST_DIR/std_data/crldir';
include/start_slave.inc
include/stop_slave.inc
CHANGE REPLICATION SOURCE TO
SOURCE_USER = 'root',
SOURCE_SSL = 0,
SOURCE_SSL_CA = '',
SOURCE_SSL_CERT = '',
SOURCE_SSL_KEY = '',
SOURCE_SSL_CRL='',
SOURCE_SSL_CRLPATH='';
Warnings:
Note #### Sending passwords in plain text without SSL/TLS is extremely insecure.
Note #### Storing MySQL user name or password information in the connection metadata repository is not secure and is therefore not recommended. Please consider using the USER and PASSWORD connection options for START REPLICA; see the 'START REPLICA Syntax' in the MySQL Manual for more information.
End of 5.0 tests
include/rpl_end.inc
|
