79 lines
3.5 KiB
Plaintext
79 lines
3.5 KiB
Plaintext
include/master-slave.inc
|
|
Warnings:
|
|
Note #### Sending passwords in plain text without SSL/TLS is extremely insecure.
|
|
Note #### Storing MySQL user name or password information in the master info repository is not secure and is therefore not recommended. Please consider using the USER and PASSWORD connection options for START SLAVE; see the 'START SLAVE Syntax' in the MySQL Manual for more information.
|
|
[connection master]
|
|
include/assert.inc [Master_SSL_Allowed should be NO by default]
|
|
include/assert.inc [Without MASTER_SSL, the slave should be connected to the master without SSL/TLS]
|
|
create user replssl@localhost require ssl;
|
|
grant replication slave on *.* to replssl@localhost;
|
|
create table t1 (t int auto_increment, KEY(t));
|
|
include/sync_slave_sql_with_master.inc
|
|
stop slave;
|
|
change master to
|
|
master_user='replssl',
|
|
master_password='',
|
|
master_ssl=1,
|
|
master_ssl_ca ='MYSQL_TEST_DIR/std_data/cacert.pem',
|
|
master_ssl_cert='MYSQL_TEST_DIR/std_data/client-cert.pem',
|
|
master_ssl_key='MYSQL_TEST_DIR/std_data/client-key.pem';
|
|
Warnings:
|
|
Note #### Sending passwords in plain text without SSL/TLS is extremely insecure.
|
|
Note #### Storing MySQL user name or password information in the master info repository is not secure and is therefore not recommended. Please consider using the USER and PASSWORD connection options for START SLAVE; see the 'START SLAVE Syntax' in the MySQL Manual for more information.
|
|
start slave;
|
|
insert into t1 values(1);
|
|
include/sync_slave_sql_with_master.inc
|
|
select * from t1;
|
|
t
|
|
1
|
|
Master_SSL_Allowed = 'Yes'
|
|
Master_SSL_CA_Path = ''
|
|
Master_SSL_CA_File = 'MYSQL_TEST_DIR/std_data/cacert.pem'
|
|
Master_SSL_Cert = 'MYSQL_TEST_DIR/std_data/client-cert.pem'
|
|
Master_SSL_Key = 'MYSQL_TEST_DIR/std_data/client-key.pem'
|
|
include/check_slave_is_running.inc
|
|
STOP SLAVE;
|
|
select * from t1;
|
|
t
|
|
1
|
|
insert into t1 values (NULL);
|
|
include/sync_slave_sql_with_master.inc
|
|
include/wait_for_slave_to_start.inc
|
|
Master_SSL_Allowed = 'Yes'
|
|
Master_SSL_CA_Path = ''
|
|
Master_SSL_CA_File = 'MYSQL_TEST_DIR/std_data/cacert.pem'
|
|
Master_SSL_Cert = 'MYSQL_TEST_DIR/std_data/client-cert.pem'
|
|
Master_SSL_Key = 'MYSQL_TEST_DIR/std_data/client-key.pem'
|
|
include/check_slave_is_running.inc
|
|
drop user replssl@localhost;
|
|
drop table t1;
|
|
include/sync_slave_sql_with_master.inc
|
|
include/stop_slave.inc
|
|
CHANGE MASTER TO
|
|
master_user = 'root',
|
|
master_ssl = 0,
|
|
master_ssl_ca = '',
|
|
master_ssl_cert = '',
|
|
master_ssl_key = '',
|
|
master_ssl_crl='',
|
|
master_ssl_crlpath='';
|
|
Warnings:
|
|
Note #### Sending passwords in plain text without SSL/TLS is extremely insecure.
|
|
Note #### Storing MySQL user name or password information in the master info repository is not secure and is therefore not recommended. Please consider using the USER and PASSWORD connection options for START SLAVE; see the 'START SLAVE Syntax' in the MySQL Manual for more information.
|
|
CHANGE MASTER TO MASTER_SSL= 1, MASTER_SSL_CRL='MYSQL_TEST_DIR/std_data/crl-client-revoked.crl', MASTER_SSL_CRLPATH='MYSQL_TEST_DIR/std_data/crldir';
|
|
include/start_slave.inc
|
|
include/stop_slave.inc
|
|
CHANGE MASTER TO
|
|
master_user = 'root',
|
|
master_ssl = 0,
|
|
master_ssl_ca = '',
|
|
master_ssl_cert = '',
|
|
master_ssl_key = '',
|
|
master_ssl_crl='',
|
|
master_ssl_crlpath='';
|
|
Warnings:
|
|
Note #### Sending passwords in plain text without SSL/TLS is extremely insecure.
|
|
Note #### Storing MySQL user name or password information in the master info repository is not secure and is therefore not recommended. Please consider using the USER and PASSWORD connection options for START SLAVE; see the 'START SLAVE Syntax' in the MySQL Manual for more information.
|
|
End of 5.0 tests
|
|
include/rpl_end.inc
|