Gecko [ www.jdcpatala.org ]

Name	Size	Permission
access_credential_control-mast...	170 B	-rw-r--r--
access_credential_control.test	27.33 KB	-rw-r--r--
cert_verify.test	2.17 KB	-rw-r--r--
early_plugin_load-master.opt	23 B	-rw-r--r--
early_plugin_load.test	1.17 KB	-rw-r--r--
install_keyring_file-master.op...	73 B	-rw-r--r--
install_keyring_file.test	1.21 KB	-rw-r--r--
key_rotation.test	622 B	-rw-r--r--
key_rotation_qa-master.opt	20 B	-rw-r--r--
key_rotation_qa.test	9.02 KB	-rw-r--r--
key_value_auth-master.opt	170 B	-rw-r--r--
key_value_auth.test	23.04 KB	-rw-r--r--
keyring_file_data-master.opt	93 B	-rw-r--r--
keyring_file_data.test	1.18 KB	-rw-r--r--
keyring_file_data_qa-master.op...	73 B	-rw-r--r--
keyring_file_data_qa.test	2.84 KB	-rw-r--r--
keyring_udf-master.opt	37 B	-rw-r--r--
keyring_udf.test	5.2 KB	-rw-r--r--
multiple_plugins-master.opt	225 B	-rw-r--r--
multiple_plugins.test	505 B	-rw-r--r--
mysql_native_plugin.test	24.09 KB	-rw-r--r--
mysql_no_login-master.opt	20 B	-rw-r--r--
mysql_no_login.test	4.56 KB	-rw-r--r--
mysql_protocol_types.test	6.42 KB	-rw-r--r--
mysql_protocol_types_windows-m...	50 B	-rw-r--r--
mysql_protocol_types_windows.t...	3.38 KB	-rw-r--r--
mysql_sha256_plugin-master.opt	170 B	-rw-r--r--
mysql_sha256_plugin.test	21.21 KB	-rw-r--r--
mysql_ssl_connection-master.op...	35 B	-rw-r--r--
mysql_ssl_connection.test	418 B	-rw-r--r--
mysql_ssl_rsa_setup.test	12.05 KB	-rw-r--r--
named_pipe_ssl-master.opt	26 B	-rw-r--r--
named_pipe_ssl.test	959 B	-rw-r--r--
openssl_cert_generation-master...	39 B	-rw-r--r--
openssl_cert_generation.test	18.35 KB	-rw-r--r--
openssl_cert_generation_debug....	3.91 KB	-rw-r--r--
openssl_cert_generation_subjec...	39 B	-rw-r--r--
openssl_cert_generation_subjec...	3.37 KB	-rw-r--r--
openssl_cert_validity-master.o...	67 B	-rw-r--r--
openssl_cert_validity.test	590 B	-rw-r--r--
openssl_skip_cert_generation-m...	67 B	-rw-r--r--
openssl_skip_cert_generation.t...	2.46 KB	-rw-r--r--
password_expired-master.opt	170 B	-rw-r--r--
password_expired.test	22.89 KB	-rw-r--r--
password_expiry.test	7.69 KB	-rw-r--r--
require_secure_transport.test	3.15 KB	-rw-r--r--
require_secure_transport_windo...	50 B	-rw-r--r--
require_secure_transport_windo...	5.81 KB	-rw-r--r--
secure_file_priv_error.test	1.61 KB	-rw-r--r--
secure_file_priv_null-master.o...	24 B	-rw-r--r--
secure_file_priv_null.test	1.47 KB	-rw-r--r--
secure_file_priv_warnings-mast...	22 B	-rw-r--r--
secure_file_priv_warnings.test	2.18 KB	-rw-r--r--
secure_file_priv_warnings_not_...	1.22 KB	-rw-r--r--
secure_file_priv_warnings_win....	1.45 KB	-rw-r--r--
server_withssl_client_withouts...	405 B	-rw-r--r--
server_withssl_client_withouts...	11.95 KB	-rw-r--r--
server_withssl_client_withssl-...	405 B	-rw-r--r--
server_withssl_client_withssl....	15.89 KB	-rw-r--r--
set_password_deprecated.test	2.67 KB	-rw-r--r--
ssl_auto_detect-master.opt	124 B	-rw-r--r--
ssl_auto_detect.test	5.22 KB	-rw-r--r--
ssl_auto_detect_openssl-master...	118 B	-rw-r--r--
ssl_auto_detect_openssl.test	2.62 KB	-rw-r--r--
ssl_mode.test	9.47 KB	-rw-r--r--
tls.test	4.45 KB	-rw-r--r--
tls12_tls1.test	2.33 KB	-rw-r--r--
wrong_keyring_file_data-master...	90 B	-rw-r--r--
wrong_keyring_file_data.test	806 B	-rw-r--r--

Code Editor : mysql_ssl_rsa_setup.test

--source include/have_openssl_binary.inc
--source include/not_embedded.inc
# Save the initial number of concurrent sessions
--source include/count_sessions.inc

#------------------------------------------------------------------------------

--echo # Test cases for mysql_ssl_rsa_setup binary
--echo # Setup
let DATADIR_LOCATION=$MYSQLTEST_VARDIR/mysqld.1/data;
#We let mysql_ssl_rsa_setup write to $wl7706_log
let wl7706_log= $MYSQLTEST_VARDIR/log/wl7706_log.txt;
let SEARCH_FILE= $wl7706_log;

# remove files
--error 0,1
--remove_file $wl7706_log
--error 0,1
--remove_file $DATADIR_LOCATION/ca.pem
--error 0,1
--remove_file $DATADIR_LOCATION/ca-key.pem
--error 0,1
--remove_file $DATADIR_LOCATION/server-cert.pem
--error 0,1
--remove_file $DATADIR_LOCATION/server-key.pem
--error 0,1
--remove_file $DATADIR_LOCATION/client-cert.pem
--error 0,1
--remove_file $DATADIR_LOCATION/client-key.pem
--error 0,1
--remove_file $DATADIR_LOCATION/private_key.pem
--error 0,1
--remove_file $DATADIR_LOCATION/public_key.pem

#------------------------------------------------------------------------------

--echo # Case 1 : Generate Files
--exec $MYSQL_SSL_RSA_SETUP --datadir=$DATADIR_LOCATION > $wl7706_log
--file_exists $DATADIR_LOCATION/ca.pem
--file_exists $DATADIR_LOCATION/ca-key.pem
--file_exists $DATADIR_LOCATION/server-cert.pem
--file_exists $DATADIR_LOCATION/server-key.pem
--file_exists $DATADIR_LOCATION/client-cert.pem
--file_exists $DATADIR_LOCATION/client-key.pem
--file_exists $DATADIR_LOCATION/private_key.pem
--file_exists $DATADIR_LOCATION/public_key.pem

--remove_file $wl7706_log

#------------------------------------------------------------------------------

--echo # Case 2 : Files are present : Generation should be skipped
--exec $MYSQL_SSL_RSA_SETUP --datadir=$DATADIR_LOCATION --verbose > $wl7706_log
let SEARCH_PATTERN= Certificate files are present in given dir. Skipping generation.;
--source include/search_pattern_in_file.inc
let SEARCH_PATTERN= RSA key files are present in given dir. Skipping generation.;
--source include/search_pattern_in_file.inc

--remove_file $wl7706_log

#------------------------------------------------------------------------------

--echo # Case 3 : Certificate files are not present but RSA key files are present.
--echo #          Only SSL certificates and keys should be generated.
--remove_file $DATADIR_LOCATION/ca.pem
--remove_file $DATADIR_LOCATION/ca-key.pem
--remove_file $DATADIR_LOCATION/server-cert.pem
--remove_file $DATADIR_LOCATION/server-key.pem
--remove_file $DATADIR_LOCATION/client-cert.pem
--remove_file $DATADIR_LOCATION/client-key.pem

--exec $MYSQL_SSL_RSA_SETUP --datadir=$DATADIR_LOCATION --verbose > $wl7706_log
--file_exists $DATADIR_LOCATION/ca.pem
--file_exists $DATADIR_LOCATION/ca-key.pem
--file_exists $DATADIR_LOCATION/server-cert.pem
--file_exists $DATADIR_LOCATION/server-key.pem
--file_exists $DATADIR_LOCATION/client-cert.pem
--file_exists $DATADIR_LOCATION/client-key.pem

let SEARCH_PATTERN= Executing : openssl x509;
--source include/search_pattern_in_file.inc
let SEARCH_PATTERN= Executing : openssl req;
--source include/search_pattern_in_file.inc
let SEARCH_PATTERN= RSA key files are present in given dir. Skipping generation.;
--source include/search_pattern_in_file.inc

--remove_file $wl7706_log

#------------------------------------------------------------------------------

--echo # Case 4 : Certificate files are present but RSA key files are not present.
--echo #          Only RSA key files should be generated.
--remove_file $DATADIR_LOCATION/private_key.pem
--remove_file $DATADIR_LOCATION/public_key.pem

--exec $MYSQL_SSL_RSA_SETUP --datadir=$DATADIR_LOCATION --verbose > $wl7706_log
--file_exists $DATADIR_LOCATION/private_key.pem
--file_exists $DATADIR_LOCATION/public_key.pem

let SEARCH_PATTERN= Certificate files are present in given dir. Skipping generation.;
--source include/search_pattern_in_file.inc
let SEARCH_PATTERN= Executing : openssl genrsa;
--source include/search_pattern_in_file.inc

--remove_file $wl7706_log

#------------------------------------------------------------------------------

--echo # Case 5 : Remove only client-cert.pem and client-key.pem.
--echo #          Certificate files should not be generated.
--remove_file $DATADIR_LOCATION/client-cert.pem
--remove_file $DATADIR_LOCATION/client-key.pem

--remove_file $wl7706_log

#------------------------------------------------------------------------------

--echo # Case 6 : Remove server-key.pem and public_key.pem.
--echo #          Certificates and RSA keys should not be generated.
--remove_file $DATADIR_LOCATION/server-key.pem
--remove_file $DATADIR_LOCATION/public_key.pem

--exec $MYSQL_SSL_RSA_SETUP --datadir=$DATADIR_LOCATION --verbose > $wl7706_log
let SEARCH_PATTERN= Certificate files are present in given dir. Skipping generation.;
--source include/search_pattern_in_file.inc
let SEARCH_PATTERN= RSA key files are present in given dir. Skipping generation.;
--source include/search_pattern_in_file.inc

--remove_file $wl7706_log

#------------------------------------------------------------------------------

--echo # Case 7 : Provide Invalid directory

--error 1
--exec $MYSQL_SSL_RSA_SETUP --datadir=$MYSQLTEST_VARDIR/doesnotexist --verbose 2> $wl7706_log
let SEARCH_PATTERN= Failed to access directory pointed by;
--source include/search_pattern_in_file.inc

--remove_file $wl7706_log

#------------------------------------------------------------------------------

--echo # Case 8 : Custom suffix of invalid length
--remove_file $DATADIR_LOCATION/ca.pem
--remove_file $DATADIR_LOCATION/ca-key.pem
--remove_file $DATADIR_LOCATION/server-cert.pem
--remove_file $DATADIR_LOCATION/private_key.pem

--error 1
--exec $MYSQL_SSL_RSA_SETUP --datadir=$DATADIR_LOCATION --suffix=string_greater_than_17_characters 2> $wl7706_log
let SEARCH_PATTERN= Maximum number of characters allowed as the value for --suffix are 17;
--source include/search_pattern_in_file.inc

--remove_file $wl7706_log

#------------------------------------------------------------------------------

--echo # Case 9 : Custom suffix of valid length
--exec $MYSQL_SSL_RSA_SETUP --datadir=$DATADIR_LOCATION --suffix=wl7706_test --verbose > $wl7706_log
let SEARCH_PATTERN= MySQL_Server_wl7706_test_Auto_Generated_CA_Certificate;
--source include/search_pattern_in_file.inc
let SEARCH_PATTERN= MySQL_Server_wl7706_test_Auto_Generated_Server_Certificate;
--source include/search_pattern_in_file.inc
let SEARCH_PATTERN= MySQL_Server_wl7706_test_Auto_Generated_Server_Certificate;
--source include/search_pattern_in_file.inc

--remove_file $wl7706_log

#------------------------------------------------------------------------------

--echo # Case 10 : Custom suffix with invalid characters

--remove_file $DATADIR_LOCATION/ca.pem
--remove_file $DATADIR_LOCATION/ca-key.pem
--remove_file $DATADIR_LOCATION/server-cert.pem
--remove_file $DATADIR_LOCATION/private_key.pem

--error 1
--exec $MYSQL_SSL_RSA_SETUP --datadir=$DATADIR_LOCATION --suffix=ab@c!de-gh 2> $wl7706_log
let SEARCH_PATTERN=Invalid string;
--source include/search_pattern_in_file.inc

--remove_file $wl7706_log

#------------------------------------------------------------------------------

--echo # Case 11 : Help and Version information

--exec $MYSQL_SSL_RSA_SETUP --help > $wl7706_log
let SEARCH_PATTERN=MySQL SSL Certificate and RSA Key Generation Utility;
--source include/search_pattern_in_file.inc

--remove_file $wl7706_log

--exec $MYSQL_SSL_RSA_SETUP -? > $wl7706_log
let SEARCH_PATTERN=MySQL SSL Certificate and RSA Key Generation Utility;
--source include/search_pattern_in_file.inc

--remove_file $wl7706_log

--exec $MYSQL_SSL_RSA_SETUP --version > $wl7706_log
let SEARCH_PATTERN=Version :;
--source include/search_pattern_in_file.inc

--remove_file $wl7706_log

--exec $MYSQL_SSL_RSA_SETUP -V > $wl7706_log
let SEARCH_PATTERN=Version :;
--source include/search_pattern_in_file.inc

--remove_file $wl7706_log

#------------------------------------------------------------------------------

--echo # Case 12 : Very long path

let $LONG_PATH=`SELECT REPEAT('/asdfg', 100)`;

--error 1
--exec $MYSQL_SSL_RSA_SETUP --datadir=$LONG_PATH 2> $wl7706_log
let SEARCH_PATTERN=Dir path is too long;
--source include/search_pattern_in_file.inc

--remove_file $wl7706_log

#------------------------------------------------------------------------------

--echo #
--echo # Bug#21087116 : MYSQL_SSL_RSA_SETUP CREATES CLIENT-CERT.PEM WITH INCORRECT CN
--echo #

--remove_file $DATADIR_LOCATION/server-key.pem
--remove_file $DATADIR_LOCATION/client-cert.pem
--remove_file $DATADIR_LOCATION/client-key.pem
--remove_file $DATADIR_LOCATION/public_key.pem

--exec $MYSQL_SSL_RSA_SETUP --datadir=$DATADIR_LOCATION --verbose > $wl7706_log

--echo # CN of CA certificate should be MySQL_Server_.*_Auto_Generated_CA_Certificate
let SEARCH_PATTERN= MySQL_Server_.*_Auto_Generated_CA_Certificate;
--source include/search_pattern_in_file.inc

--echo # CN of Server certificate should be MySQL_Server_.*_Auto_Generated_Server_Certificate
let SEARCH_PATTERN= MySQL_Server_.*_Auto_Generated_Server_Certificate;
--source include/search_pattern_in_file.inc

--echo # CN of Client certificate should be MySQL_Server_.*_Auto_Generated_Client_Certificate
let SEARCH_PATTERN= MySQL_Server_.*_Auto_Generated_Client_Certificate;
--source include/search_pattern_in_file.inc

#------------------------------------------------------------------------------

--echo # Global Cleanup
--remove_file $wl7706_log
--remove_file $DATADIR_LOCATION/ca.pem
--remove_file $DATADIR_LOCATION/ca-key.pem
--remove_file $DATADIR_LOCATION/server-cert.pem
--remove_file $DATADIR_LOCATION/server-key.pem
--remove_file $DATADIR_LOCATION/client-cert.pem
--remove_file $DATADIR_LOCATION/client-key.pem
--remove_file $DATADIR_LOCATION/private_key.pem
--remove_file $DATADIR_LOCATION/public_key.pem

# Wait till all disconnects are completed
--source include/wait_until_count_sessions.inc

#------------------------------------------------------------------------------

--echo #
--echo # Bug#21025377: CAN'T CONNECT TO SSL ENABLED SERVER FIRST 30 SEC AFTER
--echo # INITIAL STARTUP
--echo #

let mysqladmin_log=$MYSQLTEST_VARDIR/log/mysqladmin_log.txt;
--error 0, 1
--remove_file $mysqladmin_log
let CADIR_LOCATION=$MYSQLTEST_VARDIR/tmp/certs;

--error 0, 1
--rmdir $CADIR_LOCATION
--mkdir $CADIR_LOCATION
--exec $MYSQL_SSL_RSA_SETUP --datadir=$CADIR_LOCATION  > /dev/null 2>&1

--echo # Restart the server

let server_log= $MYSQLTEST_VARDIR/log/mysqld.1.err;
let $restart_file= $MYSQLTEST_VARDIR/tmp/mysqld.1.expect;
--exec echo "wait" > $restart_file
--shutdown_server 10
--source include/wait_until_disconnected.inc

--remove_file $server_log

--exec echo "restart: --ssl-capath=$CADIR_LOCATION --ssl-ca=$CADIR_LOCATION/ca.pem --ssl-cert=$CADIR_LOCATION/server-cert.pem --ssl-key=$CADIR_LOCATION/server-key.pem" > $MYSQLTEST_VARDIR/tmp/mysqld.1.expect
--enable_reconnect
--source include/wait_until_connected_again.inc
--disable_reconnect
--echo # Restart completed.

--exec $MYSQLADMIN --no-defaults --host=127.0.0.1 -P $MASTER_MYPORT --user=unknown_mysql_user ping --ssl-mode=REQUIRED > $mysqladmin_log 2>&1

--perl
  my $file= $ENV{'mysqladmin_log'};
  my $pattern= "SSL connection error";
  open(FILE, "$file") or die("unable to open $file: $!\n");
  my $count = 0;
  while (<FILE>) {
    if ($_ =~ m/$pattern/) {
      $count++;
      break;
    }
  }
  if ($count == 0){
    print "No ssl errors found after running mysql server with newely created certs.\n";
  } else {
    print "test failed.\n";
  }
  close(file);
EOF

# cleanup

--remove_file $mysqladmin_log
--remove_file $CADIR_LOCATION/ca.pem
--remove_file $CADIR_LOCATION/ca-key.pem
--remove_file $CADIR_LOCATION/server-cert.pem
--remove_file $CADIR_LOCATION/server-key.pem
--remove_file $CADIR_LOCATION/client-cert.pem
--remove_file $CADIR_LOCATION/client-key.pem
--remove_file $CADIR_LOCATION/private_key.pem
--remove_file $CADIR_LOCATION/public_key.pem

#------------------------------------------------------------------------------

${this.title}

Code Editor : mysql_ssl_rsa_setup.test