Gecko [ www.jdcpatala.org ]

Name	Size	Permission
access_credential_control-mast...	170 B	-rw-r--r--
access_credential_control.test	27.33 KB	-rw-r--r--
cert_verify.test	2.17 KB	-rw-r--r--
early_plugin_load-master.opt	23 B	-rw-r--r--
early_plugin_load.test	1.17 KB	-rw-r--r--
install_keyring_file-master.op...	73 B	-rw-r--r--
install_keyring_file.test	1.21 KB	-rw-r--r--
key_rotation.test	622 B	-rw-r--r--
key_rotation_qa-master.opt	20 B	-rw-r--r--
key_rotation_qa.test	9.02 KB	-rw-r--r--
key_value_auth-master.opt	170 B	-rw-r--r--
key_value_auth.test	23.04 KB	-rw-r--r--
keyring_file_data-master.opt	93 B	-rw-r--r--
keyring_file_data.test	1.18 KB	-rw-r--r--
keyring_file_data_qa-master.op...	73 B	-rw-r--r--
keyring_file_data_qa.test	2.84 KB	-rw-r--r--
keyring_udf-master.opt	37 B	-rw-r--r--
keyring_udf.test	5.2 KB	-rw-r--r--
multiple_plugins-master.opt	225 B	-rw-r--r--
multiple_plugins.test	505 B	-rw-r--r--
mysql_native_plugin.test	24.09 KB	-rw-r--r--
mysql_no_login-master.opt	20 B	-rw-r--r--
mysql_no_login.test	4.56 KB	-rw-r--r--
mysql_protocol_types.test	6.42 KB	-rw-r--r--
mysql_protocol_types_windows-m...	50 B	-rw-r--r--
mysql_protocol_types_windows.t...	3.38 KB	-rw-r--r--
mysql_sha256_plugin-master.opt	170 B	-rw-r--r--
mysql_sha256_plugin.test	21.21 KB	-rw-r--r--
mysql_ssl_connection-master.op...	35 B	-rw-r--r--
mysql_ssl_connection.test	418 B	-rw-r--r--
mysql_ssl_rsa_setup.test	12.05 KB	-rw-r--r--
named_pipe_ssl-master.opt	26 B	-rw-r--r--
named_pipe_ssl.test	959 B	-rw-r--r--
openssl_cert_generation-master...	39 B	-rw-r--r--
openssl_cert_generation.test	18.35 KB	-rw-r--r--
openssl_cert_generation_debug....	3.91 KB	-rw-r--r--
openssl_cert_generation_subjec...	39 B	-rw-r--r--
openssl_cert_generation_subjec...	3.37 KB	-rw-r--r--
openssl_cert_validity-master.o...	67 B	-rw-r--r--
openssl_cert_validity.test	590 B	-rw-r--r--
openssl_skip_cert_generation-m...	67 B	-rw-r--r--
openssl_skip_cert_generation.t...	2.46 KB	-rw-r--r--
password_expired-master.opt	170 B	-rw-r--r--
password_expired.test	22.89 KB	-rw-r--r--
password_expiry.test	7.69 KB	-rw-r--r--
require_secure_transport.test	3.15 KB	-rw-r--r--
require_secure_transport_windo...	50 B	-rw-r--r--
require_secure_transport_windo...	5.81 KB	-rw-r--r--
secure_file_priv_error.test	1.61 KB	-rw-r--r--
secure_file_priv_null-master.o...	24 B	-rw-r--r--
secure_file_priv_null.test	1.47 KB	-rw-r--r--
secure_file_priv_warnings-mast...	22 B	-rw-r--r--
secure_file_priv_warnings.test	2.18 KB	-rw-r--r--
secure_file_priv_warnings_not_...	1.22 KB	-rw-r--r--
secure_file_priv_warnings_win....	1.45 KB	-rw-r--r--
server_withssl_client_withouts...	405 B	-rw-r--r--
server_withssl_client_withouts...	11.95 KB	-rw-r--r--
server_withssl_client_withssl-...	405 B	-rw-r--r--
server_withssl_client_withssl....	15.89 KB	-rw-r--r--
set_password_deprecated.test	2.67 KB	-rw-r--r--
ssl_auto_detect-master.opt	124 B	-rw-r--r--
ssl_auto_detect.test	5.22 KB	-rw-r--r--
ssl_auto_detect_openssl-master...	118 B	-rw-r--r--
ssl_auto_detect_openssl.test	2.62 KB	-rw-r--r--
ssl_mode.test	9.47 KB	-rw-r--r--
tls.test	4.45 KB	-rw-r--r--
tls12_tls1.test	2.33 KB	-rw-r--r--
wrong_keyring_file_data-master...	90 B	-rw-r--r--
wrong_keyring_file_data.test	806 B	-rw-r--r--

Code Editor : tls.test

# Want to skip this test from daily Valgrind execution
--source include/no_valgrind_without_big.inc
# This test should work in embedded server after we fix mysqltest
-- source include/not_embedded.inc
-- source include/have_ssl_communication.inc
# Save the initial number of concurrent sessions
--source include/count_sessions.inc

--echo #
--echo # WL#8196 TLSv1.2 support
--echo #

--disable_query_log
call mtr.add_suppression("InnoDB: Resizing redo log");
call mtr.add_suppression("InnoDB: Starting to delete and rewrite");
call mtr.add_suppression("InnoDB: New log files created");
call mtr.add_suppression("Failed to set up SSL because of");
--enable_query_log

# We let our server restart attempts write to the file $error_log.
let $error_log= $MYSQLTEST_VARDIR/log/my_restart.err;

perl;
my $filetodelete = "$ENV{'MYSQLTEST_VARDIR'}/log/my_restart.err";
while (-e $filetodelete) {
  unlink $filetodelete;
  sleep 1;
}
EOF

let $MYSQLD_DATADIR= `SELECT @@datadir`;
let $MYSQL_SOCKET= `SELECT @@socket`;
let $MYSQL_PORT= `SELECT @@port`;

let $tls_default= TLSv1.2;

--echo #T1: Default TLS connection
--replace_result $tls_default TLS_VERSION
--exec $MYSQL --host=127.0.0.1 -P $MASTER_MYPORT -e "SHOW STATUS like 'Ssl_version'"

--echo #T2: Default SSL cipher
--replace_regex $ALLOWED_CIPHERS_REGEX
--exec $MYSQL --host=127.0.0.1 -P $MASTER_MYPORT -e "SHOW STATUS like 'Ssl_cipher'"

--echo #T3: Setting TLS version TLSv1.2 from the client
--replace_result $tls_default TLS_VERSION
--exec $MYSQL --host=127.0.0.1 -P $MASTER_MYPORT --tls-version=$tls_default -e "SHOW STATUS like 'Ssl_version'"

--echo #T4: Setting TLS version TLSv1.1 from the client
--exec $MYSQL --host=127.0.0.1 -P $MASTER_MYPORT --tls-version=TLSv1.1 -e "SHOW STATUS like 'Ssl_version'"

--echo #T5: Setting TLS version TLSv1 from the client
--exec $MYSQL --host=127.0.0.1 -P $MASTER_MYPORT --tls-version=TLSv1 -e "SHOW STATUS like 'Ssl_version'"

--echo #T6: Setting TLS version TLSv1, TLSv1.1 from the client
--exec $MYSQL --host=127.0.0.1 -P $MASTER_MYPORT --tls-version=TLSv1,TLSv1.1 -e "SHOW STATUS like 'Ssl_version'"

--echo #T7: Setting invalid TLS version value from the client, it should give error.
--error 1
--exec $MYSQL --host=127.0.0.1 -P $MASTER_MYPORT --tls-version=TLS_INVALID_VERSION -e "SHOW STATUS like 'Ssl_version'"

--echo #T8: Cipher which is not in the cipher list but not restricted permanently
--error 1
--exec $MYSQL --host=127.0.0.1 -P $MASTER_MYPORT --ssl-cipher=CAMELLIA256-SHA -e "SHOW STATUS like 'Ssl_cipher'"

--echo #T9: Cipher which is not in the cipher list but not restricted permanently, setting the server cipher as well

--echo Restart server and provide ssl-cipher at server startup
--exec echo "wait" > $MYSQLTEST_VARDIR/tmp/mysqld.1.expect
--shutdown_server
--source include/wait_until_disconnected.inc

--exec echo "restart:--ssl-cipher=CAMELLIA256-SHA " > $MYSQLTEST_VARDIR/tmp/mysqld.1.expect
--enable_reconnect
--source include/wait_until_connected_again.inc

--exec $MYSQL -h 127.0.0.1 -P $MYSQL_PORT --ssl-cipher=CAMELLIA256-SHA -e "SHOW STATUS like 'Ssl_cipher'"

--echo #T10: Permanently restricted cipher, setting in the server as well
--exec echo "wait" > $MYSQLTEST_VARDIR/tmp/mysqld.1.expect
--shutdown_server
--source include/wait_until_disconnected.inc

--exec echo "restart:--ssl-cipher=DHE-DSS-DES-CBC3-SHA " > $MYSQLTEST_VARDIR/tmp/mysqld.1.expect
--enable_reconnect
--source include/wait_until_connected_again.inc

--echo Connection will be possible, but server will not be enabled with ssl and connection is not ssl-enabled
--exec $MYSQL --host=127.0.0.1 -P $MASTER_MYPORT --ssl-cipher=DHE-DSS-DES-CBC3-SHA -e "SHOW STATUS like 'Ssl_cipher'"

--echo #T11: Setting TLS version1.2 in the server and from client giving TLSv1.1, connection should fail
--exec echo "wait" > $MYSQLTEST_VARDIR/tmp/mysqld.1.expect
--shutdown_server
--source include/wait_until_disconnected.inc

--exec echo "restart:--tls-version=TLSv1.2 " > $MYSQLTEST_VARDIR/tmp/mysqld.1.expect
--enable_reconnect
--source include/wait_until_connected_again.inc

--error 1
--exec $MYSQL --ssl-mode=REQUIRED --host=127.0.0.1 -P $MASTER_MYPORT --tls-version=TLSv1.1 -e "SHOW STATUS like 'Ssl_version'"

--echo # restart server using restart
--echo Restart server and provide ssl-cipher at server startup
--exec echo "wait" > $MYSQLTEST_VARDIR/tmp/mysqld.1.expect
--shutdown_server
--source include/wait_until_disconnected.inc

--exec echo "restart: " > $MYSQLTEST_VARDIR/tmp/mysqld.1.expect
--enable_reconnect
--source include/wait_until_connected_again.inc

${this.title}

Code Editor : tls.test