mirror of
https://github.com/MariaDB/server.git
synced 2025-02-16 02:15:33 +01:00
abcd23add2
enable ssl + ssl_verify_server_cert in the internal client too * fix replication tests to disable master_ssl_verify_server_cert because accounts are passwordless - except rpl.rpl_ssl1 * fix federated/federatedx/connect to disable SSL_VERIFY_SERVER_CERT because they cannot configure an ssl connection * fix spider to disable ssl_verify_server_cert, if configuration says so, as spider _can_ configure an ssl connection * memory leak in embedded test-connect
116 lines
3.1 KiB
Text
116 lines
3.1 KiB
Text
include/master-slave.inc
|
|
[connection master]
|
|
connection master;
|
|
create user replssl@localhost;
|
|
grant replication slave on *.* to replssl@localhost require ssl;
|
|
create table t1 (t int);
|
|
connection slave;
|
|
stop slave;
|
|
include/wait_for_slave_to_stop.inc
|
|
change master to master_user='replssl',master_password='',master_ssl=0;
|
|
start slave;
|
|
connection master;
|
|
insert into t1 values (1);
|
|
connection slave;
|
|
select * from t1;
|
|
t
|
|
include/wait_for_slave_io_error.inc [errno=1045]
|
|
include/stop_slave_sql.inc
|
|
change master to
|
|
master_ssl=1,
|
|
master_ssl_ca ='MYSQL_TEST_DIR/std_data/cacert.pem',
|
|
master_ssl_cert='MYSQL_TEST_DIR/std_data/client-cert.pem',
|
|
master_ssl_key='MYSQL_TEST_DIR/std_data/client-key.pem';
|
|
start slave;
|
|
include/wait_for_slave_to_start.inc
|
|
connection master;
|
|
connection slave;
|
|
select * from t1;
|
|
t
|
|
1
|
|
Master_SSL_Allowed = 'Yes'
|
|
Master_SSL_CA_Path = ''
|
|
Master_SSL_CA_File = 'MYSQL_TEST_DIR/std_data/cacert.pem'
|
|
Master_SSL_Cert = 'MYSQL_TEST_DIR/std_data/client-cert.pem'
|
|
Master_SSL_Key = 'MYSQL_TEST_DIR/std_data/client-key.pem'
|
|
include/check_slave_is_running.inc
|
|
stop slave;
|
|
include/wait_for_slave_to_stop.inc
|
|
change master to master_user='root',master_password='', master_ssl=0;
|
|
start slave;
|
|
include/wait_for_slave_to_start.inc
|
|
connection master;
|
|
drop user replssl@localhost;
|
|
drop table t1;
|
|
connection slave;
|
|
Master_SSL_Allowed = 'No'
|
|
Master_SSL_CA_Path = ''
|
|
Master_SSL_CA_File = 'MYSQL_TEST_DIR/std_data/cacert.pem'
|
|
Master_SSL_Cert = 'MYSQL_TEST_DIR/std_data/client-cert.pem'
|
|
Master_SSL_Key = 'MYSQL_TEST_DIR/std_data/client-key.pem'
|
|
include/check_slave_is_running.inc
|
|
connection slave;
|
|
stop slave;
|
|
include/wait_for_slave_to_stop.inc
|
|
change master to
|
|
master_host="localhost",
|
|
master_ssl=1 ,
|
|
master_ssl_ca ='MYSQL_TEST_DIR/std_data/cacert.pem',
|
|
master_ssl_cert='MYSQL_TEST_DIR/std_data/client-cert.pem',
|
|
master_ssl_key='MYSQL_TEST_DIR/std_data/client-key.pem',
|
|
master_ssl_verify_server_cert=1;
|
|
start slave;
|
|
include/wait_for_slave_to_start.inc
|
|
connection master;
|
|
create table t1 (t int);
|
|
insert into t1 values (1);
|
|
connection slave;
|
|
select * from t1;
|
|
t
|
|
1
|
|
Master_SSL_Allowed = 'Yes'
|
|
Master_SSL_CA_Path = ''
|
|
Master_SSL_CA_File = 'MYSQL_TEST_DIR/std_data/cacert.pem'
|
|
Master_SSL_Cert = 'MYSQL_TEST_DIR/std_data/client-cert.pem'
|
|
Master_SSL_Key = 'MYSQL_TEST_DIR/std_data/client-key.pem'
|
|
include/check_slave_is_running.inc
|
|
connection master;
|
|
create user replssl@127.0.0.1 identified by "sslrepl";
|
|
grant replication slave on *.* to replssl@127.0.0.1 require ssl;
|
|
connection slave;
|
|
stop slave;
|
|
include/wait_for_slave_to_stop.inc
|
|
change master to
|
|
master_host="127.0.0.1",
|
|
master_user='replssl',
|
|
master_password="sslrepl",
|
|
master_ssl=1,
|
|
master_ssl_verify_server_cert=1,
|
|
master_ssl_ca ='',
|
|
master_ssl_cert='',
|
|
master_ssl_key='';
|
|
start slave;
|
|
include/wait_for_slave_to_start.inc
|
|
show tables;
|
|
Tables_in_test
|
|
t1
|
|
connection master;
|
|
drop table t1;
|
|
connection slave;
|
|
show tables;
|
|
Tables_in_test
|
|
include/stop_slave.inc
|
|
CHANGE MASTER TO
|
|
master_host="127.0.0.1",
|
|
master_user='root',
|
|
master_password='',
|
|
master_ssl_ca ='',
|
|
master_ssl_cert='',
|
|
master_ssl_key='',
|
|
master_ssl_verify_server_cert=0,
|
|
master_ssl=1;
|
|
connection master;
|
|
drop user replssl@127.0.0.1;
|
|
connection slave;
|
|
drop user replssl@127.0.0.1;
|
|
include/rpl_end.inc
|