mirror/mariadb
1
0
Fork 0
mirror of https://github.com/MariaDB/server.git synced 2025-01-15 19:42:28 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

show in mariadb cli whether server cert was verified

Browse source
This commit is contained in:
Sergei Golubchik 2023-09-22 13:16:35 +02:00
parent 853bdf576f
commit 6b900330b9
3 changed files with 29 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
client/mysql.cc
View file

@ -5049,8 +5049,8 @@ com_status(String *buffer __attribute__((unused)),
#if defined(HAVE_OPENSSL) && !defined(EMBEDDED_LIBRARY)
if ((status_str= mysql_get_ssl_cipher(&mysql)))
tee_fprintf(stdout, "SSL:\t\t\tCipher in use is %s\n",
status_str);
tee_fprintf(stdout, "SSL:\t\t\tCipher in use is %s, cert is %s\n",
status_str, opt_ssl_verify_server_cert ? "OK" : "UNKNOWN");
else
#endif /* HAVE_OPENSSL && !EMBEDDED_LIBRARY */
tee_puts("SSL:\t\t\tNot in use", stdout);

15
mysql-test/main/mysql.result
View file

@ -640,3 +640,18 @@ WARNING: option --enable-cleartext-plugin is obsolete.
#
# MDEV-30327 Client crashes in print_last_query_cost
#
#
# show whether server cert was verified
#
create user ser@localhost identified by "ass";
MYSQL --disable-ssl-verify-server-cert -e "\s"
SSL: Cipher in use is XXX, cert is UNKNOWN
MYSQL --ssl-verify-server-cert -e "\s"
SSL: Cipher in use is XXX, cert is OK
drop user ser@localhost;

12
mysql-test/main/mysql.test
View file

@ -725,3 +725,15 @@ drop table t1;
--exec $MYSQL --show-query-costs --port=$MASTER_MYPORT -e "show tables in mysql like 'foo'"
--enable_result_log
--enable_query_log
--echo #
--echo # show whether server cert was verified
--echo #
create user ser@localhost identified by "ass";
--echo MYSQL --disable-ssl-verify-server-cert -e "\\s"
--replace_regex /^.[^S].*// /\b[-A-Z_0-9]+,/XXX,/
--exec $MYSQL -user -pass --disable-ssl-verify-server-cert -e "\\s"
--echo MYSQL --ssl-verify-server-cert -e "\\s"
--replace_regex /^.[^S].*// /\b[-A-Z_0-9]+,/XXX,/
--exec $MYSQL -user -pass --ssl-verify-server-cert -e "\\s"
drop user ser@localhost;