mirror of
				https://github.com/MariaDB/server.git
				synced 2025-11-04 12:56:14 +01:00 
			
		
		
		
	Test fixes: Since fix for CONC-603 (wrong error handling in TLS read/write) in case of a read/write error client doesn't return always error 2013 (server has gone away), so in addition we need to check for error 2026 (TLS/SSL error) and 5014 (write error).
		
			
				
	
	
		
			27 lines
		
	
	
	
		
			1.3 KiB
		
	
	
	
		
			Text
		
	
	
	
	
	
			
		
		
	
	
			27 lines
		
	
	
	
		
			1.3 KiB
		
	
	
	
		
			Text
		
	
	
	
	
	
create user ssl_sslv3@localhost;
 | 
						|
grant select on test.* to ssl_sslv3@localhost require cipher "AES128-SHA";
 | 
						|
create user ssl_tls12@localhost;
 | 
						|
grant select on test.* to ssl_tls12@localhost require cipher "AES128-SHA256";
 | 
						|
TLS1.2 ciphers: user is ok with any cipher
 | 
						|
ERROR 2026 (HY000): TLS/SSL error: sslv3 alert handshake failure
 | 
						|
ERROR 2026 (HY000): TLS/SSL error: sslv3 alert handshake failure
 | 
						|
TLS1.2 ciphers: user requires SSLv3 cipher AES128-SHA
 | 
						|
ERROR 2026 (HY000): TLS/SSL error: sslv3 alert handshake failure
 | 
						|
ERROR 2026 (HY000): TLS/SSL error: sslv3 alert handshake failure
 | 
						|
TLS1.2 ciphers: user requires TLSv1.2 cipher AES128-SHA256
 | 
						|
ERROR 2026 (HY000): TLS/SSL error: sslv3 alert handshake failure
 | 
						|
ERROR 2026 (HY000): TLS/SSL error: sslv3 alert handshake failure
 | 
						|
SSLv3 ciphers: user is ok with any cipher
 | 
						|
Variable_name	Value
 | 
						|
Ssl_cipher	AES256-SHA
 | 
						|
Variable_name	Value
 | 
						|
Ssl_cipher	DHE-RSA-AES256-SHA
 | 
						|
SSLv3 ciphers: user requires SSLv3 cipher AES128-SHA
 | 
						|
Variable_name	Value
 | 
						|
Ssl_cipher	AES128-SHA
 | 
						|
ERROR 1045 (28000): Access denied for user 'ssl_sslv3'@'localhost' (using password: NO)
 | 
						|
SSLv3 ciphers: user requires TLSv1.2 cipher AES128-SHA256
 | 
						|
ERROR 1045 (28000): Access denied for user 'ssl_tls12'@'localhost' (using password: NO)
 | 
						|
ERROR 1045 (28000): Access denied for user 'ssl_tls12'@'localhost' (using password: NO)
 | 
						|
drop user ssl_sslv3@localhost;
 | 
						|
drop user ssl_tls12@localhost;
 |