Skip to content

Commit d9f89ff

Browse files
author
Yashwant Sahu
committed
Bug #22295186: CERTIFICATE VALIDATION BUG IN MYSQL MAY ALLOW MITM
Test fix for 5.5 and 5.6
1 parent 70f1aa4 commit d9f89ff

File tree

1 file changed

+1
-5
lines changed

1 file changed

+1
-5
lines changed

mysql-test/suite/auth_sec/t/cert_verify.test

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -9,11 +9,7 @@
99
let $ssl_verify_fail_path = --ssl --ssl-ca=$MYSQL_TEST_DIR/std_data/ca-cert-verify.pem --ssl-key=$MYSQL_TEST_DIR/std_data/server-key-verify-fail.pem --ssl-cert=$MYSQL_TEST_DIR/std_data/server-cert-verify-fail.pem;
1010
let $ssl_verify_pass_path = --ssl --ssl-ca=$MYSQL_TEST_DIR/std_data/ca-cert-verify.pem --ssl-key=$MYSQL_TEST_DIR/std_data/server-key-verify-pass.pem --ssl-cert=$MYSQL_TEST_DIR/std_data/server-cert-verify-pass.pem;
1111

12-
let $tls_default= TLSv1.1;
13-
let $openssl= query_get_value("SHOW STATUS LIKE 'Rsa_public_key'", Variable_name, 1);
14-
if ($openssl == 'Rsa_public_key'){
15-
let $tls_default= TLSv1.2;
16-
}
12+
let $tls_default= TLSv1;
1713

1814
--echo #T1: Host name (/CN=localhost/) as OU name in the server certificate, server certificate verification should fail.
1915
--exec echo "wait" > $MYSQLTEST_VARDIR/tmp/mysqld.1.expect

0 commit comments

Comments
 (0)