Gecko [ www.jdcpatala.org ]

Name	Size	Permission
access_credential_control.resu...	23.21 KB	-rw-r--r--
cert_verify.result	304 B	-rw-r--r--
early_plugin_load.result	789 B	-rw-r--r--
have_mysql_upgrade.result	21 B	-rw-r--r--
have_ssl.require	33 B	-rw-r--r--
install_keyring.result	263 B	-rw-r--r--
install_keyring_file.result	979 B	-rw-r--r--
key_rotation.result	427 B	-rw-r--r--
key_rotation_qa.result	7.57 KB	-rw-r--r--
key_value_auth.result	13 KB	-rw-r--r--
keyring_file.result	479 B	-rw-r--r--
keyring_file_data.result	1.17 KB	-rw-r--r--
keyring_file_data_qa.result	2.66 KB	-rw-r--r--
keyring_udf.result	29.95 KB	-rw-r--r--
multiple_plugins.result	5.46 KB	-rw-r--r--
mysql_native_plugin.result	10.46 KB	-rw-r--r--
mysql_no_login.result	2.03 KB	-rw-r--r--
mysql_protocol_types.result	2.38 KB	-rw-r--r--
mysql_protocol_types_windows.r...	1.93 KB	-rw-r--r--
mysql_sha256_plugin.result	9.84 KB	-rw-r--r--
mysql_ssl_connection.result	202 B	-rw-r--r--
mysql_ssl_rsa_setup.result	1.4 KB	-rw-r--r--
named_pipe_ssl.result	255 B	-rw-r--r--
not_embedded.require	16 B	-rw-r--r--
not_openssl.require	36 B	-rw-r--r--
not_ssl.require	32 B	-rw-r--r--
openssl.require	37 B	-rw-r--r--
openssl_cert_generation.result	7.37 KB	-rw-r--r--
openssl_cert_generation_debug....	577 B	-rw-r--r--
openssl_cert_generation_subjec...	435 B	-rw-r--r--
openssl_cert_validity.result	109 B	-rw-r--r--
openssl_skip_cert_generation.r...	442 B	-rw-r--r--
password_expired.result	16.4 KB	-rw-r--r--
password_expiry.result	8.09 KB	-rw-r--r--
require_secure_transport.resul...	1.49 KB	-rw-r--r--
require_secure_transport_windo...	2.08 KB	-rw-r--r--
secure_file_priv_error.result	358 B	-rw-r--r--
secure_file_priv_null.result	1.08 KB	-rw-r--r--
secure_file_priv_warnings.resu...	876 B	-rw-r--r--
secure_file_priv_warnings_not_...	582 B	-rw-r--r--
secure_file_priv_warnings_win....	454 B	-rw-r--r--
server_withssl_client_withouts...	6.18 KB	-rw-r--r--
server_withssl_client_withssl....	6.08 KB	-rw-r--r--
set_password_deprecated.result	4.76 KB	-rw-r--r--
ssl_auto_detect.result	1.82 KB	-rw-r--r--
ssl_auto_detect_openssl.result	361 B	-rw-r--r--
ssl_mode.result	5.16 KB	-rw-r--r--
tls.result	1.25 KB	-rw-r--r--
tls12_tls1.result	510 B	-rw-r--r--
wrong_keyring_file.result	166 B	-rw-r--r--
wrong_keyring_file_data.result	731 B	-rw-r--r--

Code Editor : openssl_cert_generation.result

# Setup
call mtr.add_suppression("Failed to setup SSL");
call mtr.add_suppression("SSL error: SSL_CTX_set_default_verify_paths failed");
# Restart completed.
# Test 1 : System variable tests
# auto_generate_certs should be OFF.
select @@global.auto_generate_certs;
@@global.auto_generate_certs
0
# sha256_password_auto_generate_rsa_keys should be OFF.
select @@global.sha256_password_auto_generate_rsa_keys;
@@global.sha256_password_auto_generate_rsa_keys
0
set @@global.auto_generate_certs='OFF';
ERROR HY000: Variable 'auto_generate_certs' is a read only variable
set @@global.sha256_password_auto_generate_rsa_keys='OFF';
ERROR HY000: Variable 'sha256_password_auto_generate_rsa_keys' is a read only variable
# Test 2 : Restarting mysqld with :
#          --auto_generate_certs=0
#          --sha256_password_auto_generate_rsa_keys=0
# Restart completed.
# Search for : Skipping generation of SSL certificates as --auto_generate_certs is set to OFF.
# Search completed.
# Search for : Skipping generation of RSA key pair as --sha256_password_auto_generate_rsa_keys is set to OFF.
# Search completed.
# Ensure that certificate files are not there after server is started
# Ensure that server is not ssl enabled
# Ensure that sha connection is not possible in absence of certificates and keys
create user wl7699_sha256 identified with 'sha256_password';
grant usage on *.* to wl7699_sha256 identified by 'abcd';
Warnings:
Warning	1287	Using GRANT statement to modify existing user's properties other than privileges is deprecated and will be removed in future release. Use ALTER USER statement for this operation.
drop user wl7699_sha256;
# Test 3 : SSL certificates
# 3.1 : Restarting mysqld with : --auto-generate-certs=1
# Restart completed.
# Search for : Auto generated SSL certificates are placed in data directory.
# Search completed.
# Search for SSL certificate and key files in Data directory.
# Search completed.
# Ensure that RSA files are not there in data directory
# Ensure that server is ssl enabled
Variable_name	Value
Ssl_cipher	SSL_CIPHER
# Test 4 : RSA key pair
# 4.1 : Restarting mysqld with :
#       --sha256_password_auto_generate_rsa_keys=1
# Restart completed.
# Search for : Auto generated RSA key files are placed in data directory.
# Search completed.
# Search for RSA key files in Data directory.
# Search completed.
# Ensure that server is not ssl enabled
# Test 5 : Skipping SSL Certificates/Key File Generation
# 5.1 : Restarting mysqld with :
#       --auto_generate_certs=ON
#       --sha256_password_auto_generate_rsa_keys=ON
# Restart completed.
# Generation of SSL ceritificates/key files and
# RSA key pair files is skipped.
# Search for : Messages related to skipped generation of SSL certificates and RSA key pair files.
# Search completed.
# 5.2 : System variables
# auto_generate_certs, ssl_ca, ssl_cert and ssl_key should be set.
show variables like 'ssl%';
Variable_name	Value
ssl_ca	ca.pem
ssl_capath	
ssl_cert	server-cert.pem
ssl_cipher	
ssl_crl	
ssl_crlpath	
ssl_key	server-key.pem
# sha256_password_auto_generate_rsa_keys, sha256_password_private_key_path
# and sha256_password_public_key_path should be set.
show variables like 'sha256%';
Variable_name	Value
sha256_password_auto_generate_rsa_keys	ON
sha256_password_private_key_path	private_key.pem
sha256_password_proxy_users	OFF
sha256_password_public_key_path	public_key.pem
# 5.3 : SHA256_password user
create user wl7699_sha256 identified with 'sha256_password';
grant usage on *.* to wl7699_sha256 identified by 'abcd';
Warnings:
Warning	1287	Using GRANT statement to modify existing user's properties other than privileges is deprecated and will be removed in future release. Use ALTER USER statement for this operation.
# Should be able to connect to server using generated SSL certificates.
Variable_name	Value
Ssl_cipher	SSL_CIPHER
# Should be able to connect to server using RSA key pair.
current_user()
wl7699_sha256@%
drop user wl7699_sha256;
# Test 6 : SSL Certificates/Key File Generation and tests
# 6.1 : Restarting mysqld with :
#       --auto_generate_certs=ON
#       --sha256_password_auto_generate_rsa_keys=ON
# Restart completed.
# Search for : Auto generated SSL certificates are placed in data directory.
# Search completed.
# Search for : Auto generated RSA key files are placed in data directory.
# Search completed.
# 6.2 : System variables
# auto_generate_certs, ssl_ca, ssl_cert and ssl_key should be set.
show variables like 'ssl%';
Variable_name	Value
ssl_ca	ca.pem
ssl_capath	
ssl_cert	server-cert.pem
ssl_cipher	
ssl_crl	
ssl_crlpath	
ssl_key	server-key.pem
# sha256_password_auto_generate_rsa_keys, sha256_password_private_key_path
# and sha256_password_public_key_path should be set.
show variables like 'sha256%';
Variable_name	Value
sha256_password_auto_generate_rsa_keys	ON
sha256_password_private_key_path	private_key.pem
sha256_password_proxy_users	OFF
sha256_password_public_key_path	public_key.pem
# 6.3 : SSL connection
# Should be able to connect to server using generated SSL certificates.
Variable_name	Value
Ssl_cipher	SSL_CIPHER
# 6.4 : SHA256_password user
create user wl7699_sha256 identified with 'sha256_password';
grant usage on *.* to wl7699_sha256 identified by 'abcd';
Warnings:
Warning	1287	Using GRANT statement to modify existing user's properties other than privileges is deprecated and will be removed in future release. Use ALTER USER statement for this operation.
# Should be able to connect to server using generated SSL certificates.
Variable_name	Value
Ssl_cipher	SSL_CIPHER
# Should be able to connect to server using RSA key pair.
current_user()
wl7699_sha256@%
drop user wl7699_sha256;
# Test 7 : SSL Certificates/Key File Generation and tests
# 7.1 : Restarting mysqld with :
#       --skip-ssl
#       --auto_generate_certs=ON
#       --sha256_password_auto_generate_rsa_keys=ON
# Restart completed.
# Search for : Auto generated RSA key files are placed in data directory.
# Search completed.
# 7.2 : System variables
# No ssl variables should be set
show variables like 'ssl%';
Variable_name	Value
ssl_ca	
ssl_capath	
ssl_cert	
ssl_cipher	
ssl_crl	
ssl_crlpath	
ssl_key	
# sha256_password_auto_generate_rsa_keys, sha256_password_private_key_path
# and sha256_password_public_key_path should be set.
show variables like 'sha256%';
Variable_name	Value
sha256_password_auto_generate_rsa_keys	ON
sha256_password_private_key_path	private_key.pem
sha256_password_proxy_users	OFF
sha256_password_public_key_path	public_key.pem
# 7.3 : SSL connection
# Should not be able to connect to server using generated SSL certificates.
# 7.4 : SHA256_password user
create user wl7699_sha256 identified with 'sha256_password';
grant usage on *.* to wl7699_sha256 identified by 'abcd';
Warnings:
Warning	1287	Using GRANT statement to modify existing user's properties other than privileges is deprecated and will be removed in future release. Use ALTER USER statement for this operation.
# Should not be able to connect to server using generated SSL certificates.
# Should be able to connect to server using RSA key pair.
current_user()
wl7699_sha256@%
drop user wl7699_sha256;
#
# Bug#21108296 : --SSL-CIPHER OPTION CAUSES SSL INITIALIZATION FAILURE
#
# Restarting mysqld with :
#       --auto_generate_certs=ON
#       --ssl-cipher=DHE-RSA-AES256-SHA
#       --skip-sha256_password_auto_generate_rsa_keys
# Restart completed.
# Search for : Auto generated SSL certificates are placed in data directory.
# Search completed.
Variable_name	Value
Ssl_cipher	DHE-RSA-AES256-SHA
# Clean-up

${this.title}

Code Editor : openssl_cert_generation.result