Gecko [ www.jdcpatala.org ]

Name	Size	Permission
access_credential_control-mast...	170 B	-rw-r--r--
access_credential_control.test	27.33 KB	-rw-r--r--
cert_verify.test	2.17 KB	-rw-r--r--
early_plugin_load-master.opt	23 B	-rw-r--r--
early_plugin_load.test	1.17 KB	-rw-r--r--
install_keyring_file-master.op...	73 B	-rw-r--r--
install_keyring_file.test	1.21 KB	-rw-r--r--
key_rotation.test	622 B	-rw-r--r--
key_rotation_qa-master.opt	20 B	-rw-r--r--
key_rotation_qa.test	9.02 KB	-rw-r--r--
key_value_auth-master.opt	170 B	-rw-r--r--
key_value_auth.test	23.04 KB	-rw-r--r--
keyring_file_data-master.opt	93 B	-rw-r--r--
keyring_file_data.test	1.18 KB	-rw-r--r--
keyring_file_data_qa-master.op...	73 B	-rw-r--r--
keyring_file_data_qa.test	2.84 KB	-rw-r--r--
keyring_udf-master.opt	37 B	-rw-r--r--
keyring_udf.test	5.2 KB	-rw-r--r--
multiple_plugins-master.opt	225 B	-rw-r--r--
multiple_plugins.test	505 B	-rw-r--r--
mysql_native_plugin.test	24.09 KB	-rw-r--r--
mysql_no_login-master.opt	20 B	-rw-r--r--
mysql_no_login.test	4.56 KB	-rw-r--r--
mysql_protocol_types.test	6.42 KB	-rw-r--r--
mysql_protocol_types_windows-m...	50 B	-rw-r--r--
mysql_protocol_types_windows.t...	3.38 KB	-rw-r--r--
mysql_sha256_plugin-master.opt	170 B	-rw-r--r--
mysql_sha256_plugin.test	21.21 KB	-rw-r--r--
mysql_ssl_connection-master.op...	35 B	-rw-r--r--
mysql_ssl_connection.test	418 B	-rw-r--r--
mysql_ssl_rsa_setup.test	12.05 KB	-rw-r--r--
named_pipe_ssl-master.opt	26 B	-rw-r--r--
named_pipe_ssl.test	959 B	-rw-r--r--
openssl_cert_generation-master...	39 B	-rw-r--r--
openssl_cert_generation.test	18.35 KB	-rw-r--r--
openssl_cert_generation_debug....	3.91 KB	-rw-r--r--
openssl_cert_generation_subjec...	39 B	-rw-r--r--
openssl_cert_generation_subjec...	3.37 KB	-rw-r--r--
openssl_cert_validity-master.o...	67 B	-rw-r--r--
openssl_cert_validity.test	590 B	-rw-r--r--
openssl_skip_cert_generation-m...	67 B	-rw-r--r--
openssl_skip_cert_generation.t...	2.46 KB	-rw-r--r--
password_expired-master.opt	170 B	-rw-r--r--
password_expired.test	22.89 KB	-rw-r--r--
password_expiry.test	7.69 KB	-rw-r--r--
require_secure_transport.test	3.15 KB	-rw-r--r--
require_secure_transport_windo...	50 B	-rw-r--r--
require_secure_transport_windo...	5.81 KB	-rw-r--r--
secure_file_priv_error.test	1.61 KB	-rw-r--r--
secure_file_priv_null-master.o...	24 B	-rw-r--r--
secure_file_priv_null.test	1.47 KB	-rw-r--r--
secure_file_priv_warnings-mast...	22 B	-rw-r--r--
secure_file_priv_warnings.test	2.18 KB	-rw-r--r--
secure_file_priv_warnings_not_...	1.22 KB	-rw-r--r--
secure_file_priv_warnings_win....	1.45 KB	-rw-r--r--
server_withssl_client_withouts...	405 B	-rw-r--r--
server_withssl_client_withouts...	11.95 KB	-rw-r--r--
server_withssl_client_withssl-...	405 B	-rw-r--r--
server_withssl_client_withssl....	15.89 KB	-rw-r--r--
set_password_deprecated.test	2.67 KB	-rw-r--r--
ssl_auto_detect-master.opt	124 B	-rw-r--r--
ssl_auto_detect.test	5.22 KB	-rw-r--r--
ssl_auto_detect_openssl-master...	118 B	-rw-r--r--
ssl_auto_detect_openssl.test	2.62 KB	-rw-r--r--
ssl_mode.test	9.47 KB	-rw-r--r--
tls.test	4.45 KB	-rw-r--r--
tls12_tls1.test	2.33 KB	-rw-r--r--
wrong_keyring_file_data-master...	90 B	-rw-r--r--
wrong_keyring_file_data.test	806 B	-rw-r--r--

Code Editor : openssl_cert_generation_subject.test

--source include/have_openssl_binary.inc
--source include/not_embedded.inc
--source include/have_sha256_rsa_auth.inc

-- echo #
-- echo #  Bug#21087159 : AUTO-GENERATED SSL CERTS HAVE NO CN
-- echo #

--echo # Setup

call mtr.add_suppression("Failed to setup SSL");
call mtr.add_suppression("SSL error: SSL_CTX_set_default_verify_paths failed");
# We let our server restart attempts write to the file $server_log.
let server_log= $MYSQLTEST_VARDIR/log/mysqld.1.err;
let X509_SUBJECT_LOG= $MYSQLTEST_VARDIR/log/x509_subjects.log;

--echo # Stop the server and cleanup all .pem files.
let $restart_file= $MYSQLTEST_VARDIR/tmp/mysqld.1.expect;
--exec echo "wait" > $restart_file
--shutdown_server
--source include/wait_until_disconnected.inc

perl;
my $filetodelete = "$ENV{'MYSQLTEST_VARDIR'}/log/mysqld.1.err";
while (-e $filetodelete) {
  unlink $filetodelete;
  sleep 1;
}
EOF

--error 0, 1
--remove_file $MYSQLTEST_VARDIR/mysqld.1/data/ca.pem
--error 0, 1
--remove_file $MYSQLTEST_VARDIR/mysqld.1/data/ca-key.pem
--error 0, 1
--remove_file $MYSQLTEST_VARDIR/mysqld.1/data/server-cert.pem
--error 0, 1
--remove_file $MYSQLTEST_VARDIR/mysqld.1/data/server-key.pem
--error 0, 1
--remove_file $MYSQLTEST_VARDIR/mysqld.1/data/client-cert.pem
--error 0, 1
--remove_file $MYSQLTEST_VARDIR/mysqld.1/data/client-key.pem
--error 0, 1
--remove_file $MYSQLTEST_VARDIR/mysqld.1/data/private_key.pem
--error 0, 1
--remove_file $MYSQLTEST_VARDIR/mysqld.1/data/public_key.pem
--error 0, 1
--remove_file $X509_SUBJECT_LOG

--echo # Restart server with --auto_generate_certs
--exec echo "restart:--auto_generate_certs --skip-sha256_password_auto_generate_rsa_keys" > $restart_file
--enable_reconnect
--source include/wait_until_connected_again.inc
--disable_reconnect
--echo # Restart completed.

# Fetch subjects from X509 certificates
--exec openssl x509 -in $MYSQLTEST_VARDIR/mysqld.1/data/ca.pem -noout -subject > $X509_SUBJECT_LOG
--exec openssl x509 -in $MYSQLTEST_VARDIR/mysqld.1/data/server-cert.pem -noout -subject >> $X509_SUBJECT_LOG
--exec openssl x509 -in $MYSQLTEST_VARDIR/mysqld.1/data/client-cert.pem -noout -subject >> $X509_SUBJECT_LOG

perl;
  use strict;
  my $search_file= $ENV{'X509_SUBJECT_LOG'};
  my $ca_subject_pattern= "MySQL_Server_.*Auto_Generated_CA_Certificate";
  my $server_subject_pattern= "MySQL_Server_.*Auto_Generated_Server_Certificate";
  my $client_subject_pattern= "MySQL_Server_.*Auto_Generated_Client_Certificate";
  my $content="";
  open(FILE, "$search_file") or die("Unable to open '$search_file' : $!\n");
  read(FILE, $content, 256, 0);
  close(FILE);

if ( ($content =~ m{$ca_subject_pattern}) &&
       ($content =~ m{$server_subject_pattern}) &&
       ($content =~ m{$client_subject_pattern}) ) {
    print "Auto generated certificates have valid CNs with pattern _Auto_Generated_<cert_type>_Certificate as certificate subject\n";
  }
  else {
    print "One or more auto generated certificate does not contain valid CN.";
  }
EOF

--echo # cleanup

--remove_file $MYSQLTEST_VARDIR/mysqld.1/data/ca.pem
--remove_file $MYSQLTEST_VARDIR/mysqld.1/data/ca-key.pem
--remove_file $MYSQLTEST_VARDIR/mysqld.1/data/server-cert.pem
--remove_file $MYSQLTEST_VARDIR/mysqld.1/data/server-key.pem
--remove_file $MYSQLTEST_VARDIR/mysqld.1/data/client-cert.pem
--remove_file $MYSQLTEST_VARDIR/mysqld.1/data/client-key.pem
--remove_file $X509_SUBJECT_LOG
--disable_warnings
--source include/force_restart.inc
--enable_warnings

${this.title}

Code Editor : openssl_cert_generation_subject.test