Skip to content

Commit 70f1aa4

Browse files
author
Yashwant Sahu
committed
Bug #22295186: CERTIFICATE VALIDATION BUG IN MYSQL MAY ALLOW MITM.
Test Fix
1 parent 13380bf commit 70f1aa4

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

mysql-test/suite/auth_sec/t/cert_verify.test

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ if ($openssl == 'Rsa_public_key'){
2525
--source include/wait_until_connected_again.inc
2626

2727
--error 1
28-
--exec $MYSQL --protocol=tcp --ssl-verify-server-cert -e "SHOW STATUS like 'Ssl_version'"
28+
--exec $MYSQL --protocol=tcp --ssl-ca=$MYSQL_TEST_DIR/std_data/ca-cert-verify.pem --ssl-verify-server-cert -e "SHOW STATUS like 'Ssl_version'"
2929

3030
--echo #T2: Host name (localhost) as common name in the server certificate, server certificate verification should pass.
3131
--exec echo "wait" > $MYSQLTEST_VARDIR/tmp/mysqld.1.expect
@@ -37,7 +37,7 @@ if ($openssl == 'Rsa_public_key'){
3737
--source include/wait_until_connected_again.inc
3838

3939
--replace_result $tls_default TLS_VERSION
40-
--exec $MYSQL --protocol=tcp --ssl-verify-server-cert -e "SHOW STATUS like 'Ssl_version'"
40+
--exec $MYSQL --protocol=tcp --ssl-ca=$MYSQL_TEST_DIR/std_data/ca-cert-verify.pem --ssl-verify-server-cert -e "SHOW STATUS like 'Ssl_version'"
4141

4242
--echo # restart server using restart
4343
--exec echo "wait" > $MYSQLTEST_VARDIR/tmp/mysqld.1.expect

0 commit comments

Comments
 (0)