mirror of
				https://github.com/MariaDB/server.git
				synced 2025-10-31 02:46:29 +01:00 
			
		
		
		
	 f9315b3321
			
		
	
	
	f9315b3321
	
	
	
		
			
			Test fixes: Since fix for CONC-603 (wrong error handling in TLS read/write) in case of a read/write error client doesn't return always error 2013 (server has gone away), so in addition we need to check for error 2026 (TLS/SSL error) and 5014 (write error).
		
			
				
	
	
		
			27 lines
		
	
	
	
		
			1.3 KiB
		
	
	
	
		
			Text
		
	
	
	
	
	
			
		
		
	
	
			27 lines
		
	
	
	
		
			1.3 KiB
		
	
	
	
		
			Text
		
	
	
	
	
	
| create user ssl_sslv3@localhost;
 | |
| grant select on test.* to ssl_sslv3@localhost require cipher "AES128-SHA";
 | |
| create user ssl_tls12@localhost;
 | |
| grant select on test.* to ssl_tls12@localhost require cipher "AES128-SHA256";
 | |
| TLS1.2 ciphers: user is ok with any cipher
 | |
| ERROR 2026 (HY000): TLS/SSL error: sslv3 alert handshake failure
 | |
| ERROR 2026 (HY000): TLS/SSL error: sslv3 alert handshake failure
 | |
| TLS1.2 ciphers: user requires SSLv3 cipher AES128-SHA
 | |
| ERROR 2026 (HY000): TLS/SSL error: sslv3 alert handshake failure
 | |
| ERROR 2026 (HY000): TLS/SSL error: sslv3 alert handshake failure
 | |
| TLS1.2 ciphers: user requires TLSv1.2 cipher AES128-SHA256
 | |
| ERROR 2026 (HY000): TLS/SSL error: sslv3 alert handshake failure
 | |
| ERROR 2026 (HY000): TLS/SSL error: sslv3 alert handshake failure
 | |
| SSLv3 ciphers: user is ok with any cipher
 | |
| Variable_name	Value
 | |
| Ssl_cipher	AES256-SHA
 | |
| Variable_name	Value
 | |
| Ssl_cipher	DHE-RSA-AES256-SHA
 | |
| SSLv3 ciphers: user requires SSLv3 cipher AES128-SHA
 | |
| Variable_name	Value
 | |
| Ssl_cipher	AES128-SHA
 | |
| ERROR 1045 (28000): Access denied for user 'ssl_sslv3'@'localhost' (using password: NO)
 | |
| SSLv3 ciphers: user requires TLSv1.2 cipher AES128-SHA256
 | |
| ERROR 1045 (28000): Access denied for user 'ssl_tls12'@'localhost' (using password: NO)
 | |
| ERROR 1045 (28000): Access denied for user 'ssl_tls12'@'localhost' (using password: NO)
 | |
| drop user ssl_sslv3@localhost;
 | |
| drop user ssl_tls12@localhost;
 |