Commit 70f1aa42 authored by Yashwant Sahu's avatar Yashwant Sahu

Bug #22295186: CERTIFICATE VALIDATION BUG IN MYSQL MAY ALLOW MITM.

Test Fix
parent 13380bf8
...@@ -25,7 +25,7 @@ if ($openssl == 'Rsa_public_key'){ ...@@ -25,7 +25,7 @@ if ($openssl == 'Rsa_public_key'){
--source include/wait_until_connected_again.inc --source include/wait_until_connected_again.inc
--error 1 --error 1
--exec $MYSQL --protocol=tcp --ssl-verify-server-cert -e "SHOW STATUS like 'Ssl_version'" --exec $MYSQL --protocol=tcp --ssl-ca=$MYSQL_TEST_DIR/std_data/ca-cert-verify.pem --ssl-verify-server-cert -e "SHOW STATUS like 'Ssl_version'"
--echo #T2: Host name (localhost) as common name in the server certificate, server certificate verification should pass. --echo #T2: Host name (localhost) as common name in the server certificate, server certificate verification should pass.
--exec echo "wait" > $MYSQLTEST_VARDIR/tmp/mysqld.1.expect --exec echo "wait" > $MYSQLTEST_VARDIR/tmp/mysqld.1.expect
...@@ -37,7 +37,7 @@ if ($openssl == 'Rsa_public_key'){ ...@@ -37,7 +37,7 @@ if ($openssl == 'Rsa_public_key'){
--source include/wait_until_connected_again.inc --source include/wait_until_connected_again.inc
--replace_result $tls_default TLS_VERSION --replace_result $tls_default TLS_VERSION
--exec $MYSQL --protocol=tcp --ssl-verify-server-cert -e "SHOW STATUS like 'Ssl_version'" --exec $MYSQL --protocol=tcp --ssl-ca=$MYSQL_TEST_DIR/std_data/ca-cert-verify.pem --ssl-verify-server-cert -e "SHOW STATUS like 'Ssl_version'"
--echo # restart server using restart --echo # restart server using restart
--exec echo "wait" > $MYSQLTEST_VARDIR/tmp/mysqld.1.expect --exec echo "wait" > $MYSQLTEST_VARDIR/tmp/mysqld.1.expect
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment