1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
|
#echo Suppress expiration warning by the server check: revoked certs test
call mtr.add_suppression("Server SSL certificate doesn't verify");
let $crllen=`select length(trim(coalesce(@@ssl_crl, ''))) + length(trim(coalesce(@@ssl_crlpath, '')))`;
if (!$crllen)
{
skip Needs OpenSSL;
}
--echo # Test clients with and without CRL lists
let $ssl_base = --ssl-ca=$MYSQL_TEST_DIR/std_data/crl-ca-cert.pem --ssl-key=$MYSQL_TEST_DIR/std_data/crl-server-key.pem --ssl-cert=$MYSQL_TEST_DIR/std_data/crl-server-cert.pem;
let $ssl_crl = $ssl_base --ssl-crl=$MYSQL_TEST_DIR/std_data/crl-client-revoked.crl;
let $ssl_crlpath = $ssl_base --ssl-crlpath=$MYSQL_TEST_DIR/std_data/crldir;
--echo ############ Test mysql ##############
--echo # Test mysql connecting to a server with a certificate revoked by -crl
--replace_result $MYSQL_TEST_DIR MYSQL_TEST_DIR
--error 1
--exec $MYSQL $ssl_crl --ssl-mode=VERIFY_CA test -e "SHOW VARIABLES WHERE variable_name LIKE '%ssl%' AND variable_name NOT LIKE '%processlist%';"
--echo # Test mysql connecting to a server with a certificate revoked by -crlpath
--replace_result $MYSQL_TEST_DIR MYSQL_TEST_DIR
--error 1
--exec $MYSQL $ssl_crlpath --ssl-mode=VERIFY_CA test -e "SHOW VARIABLES WHERE variable_name LIKE '%ssl%' AND variable_name NOT LIKE '%processlist%';"
--echo ############ Test mysqladmin ##############
let $admin_prefix = --no-defaults;
let $admin_suffix = --default-character-set=latin1 -S $MASTER_MYSOCK -P $MASTER_MYPORT -u root --password= ping;
--echo # Test mysqladmin connecting to a server with a certificate revoked by -crl
--disable_result_log
--replace_regex /.*mysqladmin.*: connect/mysqladmin: connect/
--error 1
--exec $MYSQLADMIN $admin_prefix $ssl_crl $admin_suffix --ssl-mode=VERIFY_CA 2>&1
--enable_result_log
--disable_result_log
--echo # Test mysqladmin connecting to a server with a certificate revoked by -crlpath
--replace_regex /.*mysqladmin.*: connect/mysqladmin: connect/
--error 1
--exec $MYSQLADMIN $admin_prefix $ssl_crlpath $admin_suffix --ssl-mode=VERIFY_CA 2>&1
--enable_result_log
|
