mariadb

Tree: 01f8130aa6

Author	SHA1	Message	Date
unknown	bd0794bc37	Generate new ca, client and server cert. Set CN in the server cert to localhost so that we can test --ssl-verify-server-cert SSL/cacert.pem: Generate new CA cert to get the CA's private key SSL/client-cert.pem: Generate new client cert since we have a new CA cert SSL/client-key.pem: Generate new client cert since we have a new CA cert SSL/client-req.pem: Generate new client cert since we have a new CA cert SSL/server-cert.pem: Generate new server cert since we have a new CA cert and set it's CN to localhost so that we can test --ssl-verify-server-cert SSL/server-key.pem: Generate new server cert since we have a new CA cert and set it's CN to localhost so that we can test --ssl-verify-server-cert SSL/server-req.pem: Generate new server cert since we have a new CA cert and set it's CN to localhost so that we can test --ssl-verify-server-cert	20 years ago
unknown	c1d64ccc1b	Bug#17208 SSL: client does not verify server certificate - Add new function 'ssl_verify_server_cert' which is used if we are connecting to the server with SSL. It will compare the hostname in the server's cert against the hostname that we used when connecting to the server. Will reject the connection if hostname does not match. - Add new option "OPT_SSL_VERIFY_SERVER_CERT" to be passed to mysql_options which will turn on checking of servers cert. - Add new argument "ssl-verify-server-cert" to all mysql* clients which will activate the above option. - Generate a new server cert with 1024 bits that has "localhost" as the server name. SSL/server-cert.pem: Generate a new server cert that has "localhost" as CN, so that we can test to verify the hostname we connected against with the hostname in the cert client/client_priv.h: Add OPT_SSL_VERIFY_CERT client/mysql.cc: Pass the variable "opt_ssl_verify_server_cert" to the mysql_options function. It's processed/included by include/sslopt.h files client/mysqladmin.cc: Pass the variable "opt_ssl_verify_server_cert" to the mysql_options function. It's processed/included by include/sslopt.h files client/mysqldump.c: Pass the variable "opt_ssl_verify_server_cert" to the mysql_options function. It's processed/included by include/sslopt.h files client/mysqlimport.c: Pass the variable "opt_ssl_verify_server_cert" to the mysql_options function. It's processed/included by include/sslopt.h files client/mysqlshow.c: Pass the variable "opt_ssl_verify_server_cert" to the mysql_options function. It's processed/included by include/sslopt*.h files client/mysqltest.c: Always set opt_ssl_verify_server_cert on in mysqltest if we are using SSL include/mysql.h: Add variable ssl_verify_cerver_cert include/sslopt-longopts.h: Add ssl-verify-server-cert options to all clients. include/sslopt-vars.h: Add opt_ssl_varify_server_cert to all clients. sql-common/client.c: Add ssl_vertify_server_cert function which is executed if user has set the option ssl_verify_cerver_cert vio/viosslfactories.c: Ask the SSL library to verify servers cert by setting the SSL_VERIFY_PEER flag	20 years ago
unknown	cdbc2fe43a	Regenerated expired CA certificate and signed dependant certificates SSL/cacert.pem: Regenerated expired CA certificate SSL/client-cert.pem: Signed client certificate after regenerating CA certificate SSL/server-cert.pem: Signed server certificate after regenerating CA certificate	22 years ago
unknown	5f016696ec	openssl_1.result, openssl_1.test: Aligned test with regenerated SSL certs Many files: Regenerated expired certificates SSL/cacert.pem: Regenerated expired certificates SSL/client-cert.pem: Regenerated expired certificates SSL/client-key.pem: Regenerated expired certificates SSL/client-req.pem: Regenerated expired certificates SSL/server-cert.pem: Regenerated expired certificates SSL/server-key.pem: Regenerated expired certificates SSL/server-req.pem: Regenerated expired certificates mysql-test/t/openssl_1.test: Aligned test with regenerated SSL certs mysql-test/r/openssl_1.result: Aligned test with regenerated SSL certs BitKeeper/etc/logging_ok: Logging to logging@openlogging.org accepted	23 years ago
unknown	dc5cca26e9	server-key.pem regenerated server-cert.pem regenerated client-key.pem Regenerated client-cert.pem Regenerated cacert.pem Regenerated (previous exprired) SSL/cacert.pem: Regenerated (previous exprired) SSL/client-cert.pem: Regenerated SSL/client-key.pem: Regenerated SSL/server-cert.pem: regenerated SSL/server-key.pem: regenerated	24 years ago
unknown	7b2ac5736a	server-key.pem regenerated server-cert.pem regenerated client-key.pem regenerated client-cert.pem regenerated cacert.pem regenerated sslopt-case.h changed optarg to argument, decomment --ssl-key include/sslopt-case.h: changed optarg to argument, decomment --ssl-key SSL/cacert.pem: regenerated SSL/client-cert.pem: regenerated SSL/client-key.pem: regenerated SSL/server-cert.pem: regenerated SSL/server-key.pem: regenerated	24 years ago
unknown	2ec8dce13d	OpenSSL fixes. Should not affect anything else. Makefile.am: Moved bio dir into server_dirs in acinclude.in client/Makefile.am: We need OpenSSL includes here include/global.h: Workaround for OPENSSL librar bug with defining crypt() include/violite.h: small fixes libmysql/Makefile.am: We need OpenSSL includes here libmysql/Makefile.shared: Yes, we need to compile more programs whtn --with-openssl is used libmysql/libmysql.c: Make it work! (openssl) libmysql_r/Makefile.am: We need OpenSSL includes here sql/mysqld.cc: Memory was not freed before sql/sql_parse.cc: fix vio/Makefile.am: Added testprogram compilation and openssl libraries linking vio/viossl.c: Cleanups, fixes, etc... vio/viosslfactories.c: Copyright was missing. Fixed renamed macros for newer OpenSSL vio/viotest-ssl.c: Made testprogram work again BitKeeper/etc/logging_ok: Logging to logging@openlogging.org accepted	25 years ago

5 Commits (01f8130aa68392d14f36cc17c01e1b349bf844f5)