mirror of
https://github.com/MariaDB/server.git
synced 2025-01-15 19:42:28 +01:00
Add MTR to ensure startup fails with invalid ssl-cipher
Add a simple test to verify that the server will fail to start up when no valid cipher suites are passed to `ssl-cipher`. As different TLS libraries and versions have differing cipher suite support, it would be a good idea to ensure the server behaves in a safe manner if it is configured with invalid cipher suites. All new code of the whole pull request, including one or several files that are either new files or modified ones, are contributed under the BSD-new license. I am contributing on behalf of my employer Amazon Web Services, Inc.
This commit is contained in:
parent
420d9eb27f
commit
2294ecdf0e
2 changed files with 8 additions and 0 deletions
|
@ -1,2 +1,3 @@
|
|||
FOUND 1 /\[ERROR\] SSL error: Unable to get certificate/ in errorlog.err
|
||||
FOUND 1 /\[ERROR\] SSL error: Failed to set ciphers to use/ in errorlog.err
|
||||
# restart
|
||||
|
|
|
@ -19,4 +19,11 @@
|
|||
--source include/search_pattern_in_file.inc
|
||||
--remove_file $SEARCH_FILE
|
||||
|
||||
# No valid cipher suites
|
||||
--error 1
|
||||
--exec $MYSQLD --defaults-group-suffix=.1 --defaults-file=$MYSQLTEST_VARDIR/my.cnf --ssl-cipher=ECDHE-ECDSA-FAKE-CIPHER:ECDHE-RSA-INVALID --log-error=$errorlog
|
||||
--let SEARCH_PATTERN=\[ERROR\] SSL error: Failed to set ciphers to use
|
||||
--source include/search_pattern_in_file.inc
|
||||
--remove_file $SEARCH_FILE
|
||||
|
||||
--source include/start_mysqld.inc
|
||||
|
|
Loading…
Reference in a new issue