File: ssl_fips_mode_basic.test

package info (click to toggle)
mysql-8.0 8.0.43-3
  • links: PTS, VCS
  • area: main
  • in suites: sid
  • size: 1,273,924 kB
  • sloc: cpp: 4,684,605; ansic: 412,450; pascal: 108,398; java: 83,641; perl: 30,221; cs: 27,067; sql: 26,594; sh: 24,181; python: 21,816; yacc: 17,169; php: 11,522; xml: 7,388; javascript: 7,076; makefile: 2,194; lex: 1,075; awk: 670; asm: 520; objc: 183; ruby: 97; lisp: 86
file content (80 lines) | stat: -rw-r--r-- 1,957 bytes parent folder | download 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
 
--source include/have_fips.inc

--error ER_INCORRECT_GLOBAL_LOCAL_VAR
SET GLOBAL ssl_fips_mode=0;
SELECT @@GLOBAL.ssl_fips_mode;

--error ER_INCORRECT_GLOBAL_LOCAL_VAR
SET GLOBAL ssl_fips_mode=1;
SELECT @@GLOBAL.ssl_fips_mode;

--error ER_INCORRECT_GLOBAL_LOCAL_VAR
SET GLOBAL ssl_fips_mode=2;
SELECT @@GLOBAL.ssl_fips_mode;

--error ER_INCORRECT_GLOBAL_LOCAL_VAR
SET GLOBAL ssl_fips_mode=off;
SELECT @@GLOBAL.ssl_fips_mode;

--error ER_INCORRECT_GLOBAL_LOCAL_VAR
SET GLOBAL ssl_fips_mode=on;
SELECT @@GLOBAL.ssl_fips_mode;

--error ER_INCORRECT_GLOBAL_LOCAL_VAR
SET GLOBAL ssl_fips_mode=strict;
SELECT @@GLOBAL.ssl_fips_mode;

--error ER_INCORRECT_GLOBAL_LOCAL_VAR
SET GLOBAL ssl_fips_mode='oFf';
SELECT @@GLOBAL.ssl_fips_mode;

--error ER_INCORRECT_GLOBAL_LOCAL_VAR
SET GLOBAL ssl_fips_mode='oN';
SELECT @@GLOBAL.ssl_fips_mode;

--error ER_INCORRECT_GLOBAL_LOCAL_VAR
SET GLOBAL ssl_fips_mode='Strict';
SELECT @@GLOBAL.ssl_fips_mode;

--error ER_INCORRECT_GLOBAL_LOCAL_VAR
SET GLOBAL ssl_fips_mode='';

--error ER_INCORRECT_GLOBAL_LOCAL_VAR
SET GLOBAL ssl_fips_mode=3;

--error ER_INCORRECT_GLOBAL_LOCAL_VAR
SET GLOBAL ssl_fips_mode=-1;

--error ER_INCORRECT_GLOBAL_LOCAL_VAR
SET SESSION ssl_fips_mode=1;

CREATE USER u1 IDENTIFIED BY 'pwd';

--echo ##Test: User without admin/super privilege
connect(con1,localhost,u1,pwd,test,,,);
--error ER_INCORRECT_GLOBAL_LOCAL_VAR
SET GLOBAL ssl_fips_mode=ON;

connection default;

--echo ##Test: User with admin privilege
GRANT SYSTEM_VARIABLES_ADMIN ON *.* TO u1;
disconnect con1;
connect(con1,localhost,u1,pwd,test,,,);
--error ER_INCORRECT_GLOBAL_LOCAL_VAR
SET GLOBAL ssl_fips_mode=ON;
connection default;
REVOKE SYSTEM_VARIABLES_ADMIN ON *.* FROM u1;

--echo ##Test: User with SUPER privilege
GRANT SUPER ON *.* TO u1;
disconnect con1;
connect(con1,localhost,u1,pwd,test,,,);
--error ER_INCORRECT_GLOBAL_LOCAL_VAR
SET GLOBAL ssl_fips_mode=ON;

--echo CLEANUP
disconnect con1;
connection default;
DROP USER u1;