Skip to content

Commit e116f11

Browse files
vaintroubvaintroub
committed
MDEV-18131 MariaDB does not verify IP addresses from subject alternative
names Added a call to X509_check_ip_asc() in case server_hostname represents an IP address.
1 parent eb9b03a commit e116f11

17 files changed

+488
-471
lines changed

‎mysql-test/lib/generate-ssl-certs.sh

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ openssl ca -keyfile cakey.pem -days 7300 -batch -cert cacert.pem -policy policy_
3131

3232
# with SubjectAltName, only for OpenSSL 1.0.2+
3333
cat > demoCA/sanext.conf <<EOF
34-
subjectAltName=DNS:localhost
34+
subjectAltName=IP:127.0.0.1, DNS:localhost
3535
EOF
3636
openssl req -newkey rsa:1024 -keyout serversan-key.pem -out demoCA/serversan-req.pem -days 7300 -nodes -subj '/CN=server/C=FI/ST=Helsinki/L=Helsinki/O=MariaDB'
3737
openssl ca -keyfile cakey.pem -extfile demoCA/sanext.conf -days 7300 -batch -cert cacert.pem -policy policy_anything -out serversan-cert.pem -infiles demoCA/serversan-req.pem

‎mysql-test/r/ssl.result

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,10 +3,10 @@ have_ssl
33
1
44
SHOW STATUS LIKE 'Ssl_server_not_before';
55
Variable_name Value
6-
Ssl_server_not_before Apr 25 20:52:21 2017 GMT
6+
Ssl_server_not_before Apr 24 14:29:39 2019 GMT
77
SHOW STATUS LIKE 'Ssl_server_not_after';
88
Variable_name Value
9-
Ssl_server_not_after Apr 20 20:52:21 2037 GMT
9+
Ssl_server_not_after Apr 19 14:29:39 2039 GMT
1010
drop table if exists t1,t2,t3,t4;
1111
CREATE TABLE t1 (
1212
Period smallint(4) unsigned zerofill DEFAULT '0000' NOT NULL,

‎mysql-test/r/ssl_verify_ip.result

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
1
2+
1
3+
1
4+
1

‎mysql-test/std_data/cacert.pem

Lines changed: 58 additions & 58 deletions
Original file line numberDiff line numberDiff line change
@@ -2,78 +2,78 @@ Certificate:
22
Data:
33
Version: 3 (0x2)
44
Serial Number:
5-
e5:b1:e3:71:e9:6f:a9:e1
5+
c8:ae:a5:b8:5b:90:50:49
66
Signature Algorithm: sha256WithRSAEncryption
7-
Issuer: CN=cacert, C=FI, ST=Helsinki, L=Helsinki, O=MariaDB
7+
Issuer: CN = cacert, C = FI, ST = Helsinki, L = Helsinki, O = MariaDB
88
Validity
9-
Not Before: Apr 25 20:52:21 2017 GMT
10-
Not After : Apr 20 20:52:21 2037 GMT
11-
Subject: CN=cacert, C=FI, ST=Helsinki, L=Helsinki, O=MariaDB
9+
Not Before: Apr 24 14:29:39 2019 GMT
10+
Not After : Apr 19 14:29:39 2039 GMT
11+
Subject: CN = cacert, C = FI, ST = Helsinki, L = Helsinki, O = MariaDB
1212
Subject Public Key Info:
1313
Public Key Algorithm: rsaEncryption
1414
Public-Key: (2048 bit)
1515
Modulus:
16-
00:a0:ad:d5:b1:ec:45:6f:d6:33:fc:5a:03:29:14:
17-
f1:8e:78:d5:27:53:79:e0:92:7c:10:3b:79:a0:d7:
18-
b6:9d:a8:5c:4d:fa:68:11:b3:03:9e:ee:5e:20:79:
19-
23:d8:9c:49:34:9c:1d:c4:6e:53:1f:9a:92:1f:08:
20-
c1:15:e2:ad:cf:59:cd:1e:55:84:79:f9:09:ca:36:
21-
8a:50:83:c6:38:48:c6:d3:fa:f6:f2:2a:4f:bd:5d:
22-
60:9d:eb:21:c4:8c:f2:dd:2d:49:10:63:46:47:de:
23-
2d:59:a0:4a:e0:58:e6:c0:ae:d8:d4:5e:9a:f8:f5:
24-
68:1d:ea:80:8a:d6:01:b0:d5:5f:30:4d:88:5a:c5:
25-
1f:81:92:c1:40:54:c8:bb:a6:a1:43:de:81:3c:4b:
26-
79:95:82:bb:52:da:a3:a4:a0:69:ff:7e:00:8c:86:
27-
85:ec:af:03:68:a8:83:48:a0:e4:1d:31:a9:5c:47:
28-
99:9d:3a:3f:b5:3e:12:7c:4d:47:15:72:f1:11:5c:
29-
4a:ef:08:1c:7b:8f:e6:03:06:07:4f:94:21:b0:5e:
30-
27:fa:93:8c:b4:cc:56:34:3b:6d:c4:4a:14:57:b2:
31-
21:1a:3e:2f:c5:9e:47:1a:59:05:22:0e:56:b1:a7:
32-
e8:80:9b:82:c3:54:57:12:05:94:79:a2:03:d9:64:
33-
3c:63
16+
00:d6:d4:5c:62:a3:d7:9a:8e:f3:60:a5:f2:07:64:
17+
bd:f8:2e:16:73:44:1e:4c:5a:96:07:08:88:84:d0:
18+
4d:15:83:0c:af:65:4c:55:42:96:14:82:f8:00:66:
19+
5b:2c:b5:7b:e7:44:a5:aa:4e:63:e1:d9:88:05:2a:
20+
80:c2:f2:4d:70:eb:63:24:7f:f9:d9:70:13:53:cb:
21+
45:12:0c:3c:1e:d2:ce:08:f9:b9:e0:bf:8d:6b:0c:
22+
b9:29:99:31:96:f9:b6:b0:fd:e5:14:d9:e7:3b:77:
23+
26:5c:c1:e3:54:c7:63:e0:a3:30:de:86:06:19:0f:
24+
7e:04:d2:d2:d3:f0:78:23:21:79:3c:9a:42:41:6e:
25+
53:36:de:dc:0f:c7:98:8a:85:79:0a:d4:ef:90:02:
26+
1b:12:3a:60:32:6c:54:c5:8a:7f:74:24:0e:d3:08:
27+
5b:d2:e6:ae:de:17:47:8f:4d:ae:13:00:67:45:e6:
28+
bc:0e:ee:1b:0d:44:b2:0c:25:6d:b8:38:5c:87:c1:
29+
d3:98:27:a1:56:21:5c:42:15:b3:f4:b7:ec:ae:bd:
30+
ae:af:e4:50:0d:34:7c:3c:e1:b1:64:f6:e4:07:53:
31+
9d:96:44:8a:41:e0:3c:df:f2:fc:6d:de:f7:5d:8c:
32+
04:ca:e1:4f:cc:a5:c5:0c:ce:a8:f7:49:b5:63:6b:
33+
02:53
3434
Exponent: 65537 (0x10001)
3535
X509v3 extensions:
3636
X509v3 Subject Key Identifier:
37-
1C:C7:2B:AA:1B:B1:BB:2E:9A:F4:0F:B1:86:60:57:38:C2:41:05:12
37+
F3:1D:A0:5F:69:33:8A:A4:B4:76:97:A2:6E:AB:FD:A0:BF:F3:2C:CE
3838
X509v3 Authority Key Identifier:
39-
keyid:1C:C7:2B:AA:1B:B1:BB:2E:9A:F4:0F:B1:86:60:57:38:C2:41:05:12
39+
keyid:F3:1D:A0:5F:69:33:8A:A4:B4:76:97:A2:6E:AB:FD:A0:BF:F3:2C:CE
4040

41-
X509v3 Basic Constraints:
41+
X509v3 Basic Constraints: critical
4242
CA:TRUE
4343
Signature Algorithm: sha256WithRSAEncryption
44-
0d:4b:21:52:fa:49:34:56:14:db:83:ae:1c:3d:a7:4d:3e:ea:
45-
55:7e:1a:37:7a:65:89:ee:19:05:94:9d:3a:ad:59:c4:38:16:
46-
b2:bd:02:ee:5a:a6:7e:e2:b1:21:a3:ad:af:8c:ae:c3:30:71:
47-
ad:d7:d2:24:0f:c4:d9:47:80:c5:95:05:1d:7c:8a:49:0a:7d:
48-
8b:61:ca:b5:68:3d:3e:4e:f1:c7:45:62:c8:cc:a9:2f:f3:12:
49-
f1:3f:92:34:7f:07:ab:d3:ac:ab:af:2d:c9:69:63:8a:b2:e5:
50-
35:ea:7d:b8:17:38:72:82:5f:96:3d:dc:8d:e5:11:bb:ae:f3:
51-
02:2d:20:77:5c:64:59:18:a6:e7:fa:c7:89:e8:30:12:14:04:
52-
40:5b:e9:b1:8f:86:81:b9:0d:6c:b6:fc:98:f9:b7:52:ab:8f:
53-
7e:53:c8:a0:05:e4:cd:0d:6b:d2:74:9f:17:7a:a1:c3:76:5e:
54-
f3:29:1c:c6:be:56:ab:02:f7:5d:e1:c9:21:27:6d:66:7a:41:
55-
29:49:a3:f8:f5:2a:e7:03:2a:7c:52:4b:f5:46:58:45:be:a4:
56-
4c:a0:65:37:1d:d8:ac:f8:1f:81:ca:9c:79:f0:ff:22:8c:1d:
57-
ce:2b:d0:1e:ce:99:f2:db:fa:66:84:e6:86:6f:19:3b:10:f1:
58-
92:ac:57:b2
44+
0c:1b:af:48:e0:29:ff:d5:23:27:4f:0b:f6:4d:d3:c6:73:13:
45+
ee:fa:ba:84:9e:22:c6:c4:35:11:d3:aa:42:11:a5:4f:97:39:
46+
72:d5:eb:6e:3e:d1:75:dc:51:bc:bc:ab:2a:0d:28:aa:3a:2e:
47+
f1:7f:ae:a0:16:27:07:2e:a3:f1:06:ed:33:9b:8f:b5:3a:ca:
48+
8c:a7:e8:fe:b9:a4:b3:4e:c1:27:7d:7b:23:33:10:fe:27:4b:
49+
a2:b1:6a:32:09:30:84:24:d2:1d:02:9d:41:3b:ba:4e:51:ff:
50+
ce:98:c3:c9:9a:22:b8:ac:21:5b:c3:89:28:8e:3b:6a:9c:d3:
51+
5f:ef:99:6d:ac:f5:56:81:09:97:22:31:96:49:b8:75:1d:71:
52+
5c:76:7d:64:87:77:18:30:4e:43:f7:c3:1a:f9:d5:cf:97:29:
53+
28:cf:40:84:da:35:29:bc:f6:9a:9e:e9:ce:f8:cc:57:02:41:
54+
13:d1:60:18:41:60:b7:17:c6:b6:6d:71:d8:20:50:56:13:3c:
55+
6c:23:0e:91:1b:2f:8d:31:e8:82:da:71:5f:6c:1c:3f:f6:7f:
56+
2c:30:47:eb:89:c6:28:9b:61:62:43:e2:3a:91:48:0b:1e:2a:
57+
c0:d9:a0:59:69:4f:13:58:cc:4a:8a:37:2e:c6:c1:a1:7b:03:
58+
4a:e5:cb:98
5959
-----BEGIN CERTIFICATE-----
60-
MIIDfzCCAmegAwIBAgIJAOWx43Hpb6nhMA0GCSqGSIb3DQEBCwUAMFYxDzANBgNV
60+
MIIDgjCCAmqgAwIBAgIJAMiupbhbkFBJMA0GCSqGSIb3DQEBCwUAMFYxDzANBgNV
6161
BAMMBmNhY2VydDELMAkGA1UEBhMCRkkxETAPBgNVBAgMCEhlbHNpbmtpMREwDwYD
62-
VQQHDAhIZWxzaW5raTEQMA4GA1UECgwHTWFyaWFEQjAeFw0xNzA0MjUyMDUyMjFa
63-
Fw0zNzA0MjAyMDUyMjFaMFYxDzANBgNVBAMMBmNhY2VydDELMAkGA1UEBhMCRkkx
62+
VQQHDAhIZWxzaW5raTEQMA4GA1UECgwHTWFyaWFEQjAeFw0xOTA0MjQxNDI5Mzla
63+
Fw0zOTA0MTkxNDI5MzlaMFYxDzANBgNVBAMMBmNhY2VydDELMAkGA1UEBhMCRkkx
6464
ETAPBgNVBAgMCEhlbHNpbmtpMREwDwYDVQQHDAhIZWxzaW5raTEQMA4GA1UECgwH
65-
TWFyaWFEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKCt1bHsRW/W
66-
M/xaAykU8Y541SdTeeCSfBA7eaDXtp2oXE36aBGzA57uXiB5I9icSTScHcRuUx+a
67-
kh8IwRXirc9ZzR5VhHn5Cco2ilCDxjhIxtP69vIqT71dYJ3rIcSM8t0tSRBjRkfe
68-
LVmgSuBY5sCu2NRemvj1aB3qgIrWAbDVXzBNiFrFH4GSwUBUyLumoUPegTxLeZWC
69-
u1Lao6Sgaf9+AIyGheyvA2iog0ig5B0xqVxHmZ06P7U+EnxNRxVy8RFcSu8IHHuP
70-
5gMGB0+UIbBeJ/qTjLTMVjQ7bcRKFFeyIRo+L8WeRxpZBSIOVrGn6ICbgsNUVxIF
71-
lHmiA9lkPGMCAwEAAaNQME4wHQYDVR0OBBYEFBzHK6obsbsumvQPsYZgVzjCQQUS
72-
MB8GA1UdIwQYMBaAFBzHK6obsbsumvQPsYZgVzjCQQUSMAwGA1UdEwQFMAMBAf8w
73-
DQYJKoZIhvcNAQELBQADggEBAA1LIVL6STRWFNuDrhw9p00+6lV+Gjd6ZYnuGQWU
74-
nTqtWcQ4FrK9Au5apn7isSGjra+MrsMwca3X0iQPxNlHgMWVBR18ikkKfYthyrVo
75-
PT5O8cdFYsjMqS/zEvE/kjR/B6vTrKuvLclpY4qy5TXqfbgXOHKCX5Y93I3lEbuu
76-
8wItIHdcZFkYpuf6x4noMBIUBEBb6bGPhoG5DWy2/Jj5t1Krj35TyKAF5M0Na9J0
77-
nxd6ocN2XvMpHMa+VqsC913hySEnbWZ6QSlJo/j1KucDKnxSS/VGWEW+pEygZTcd
78-
2Kz4H4HKnHnw/yKMHc4r0B7OmfLb+maE5oZvGTsQ8ZKsV7I=
65+
TWFyaWFEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANbUXGKj15qO
66+
82Cl8gdkvfguFnNEHkxalgcIiITQTRWDDK9lTFVClhSC+ABmWyy1e+dEpapOY+HZ
67+
iAUqgMLyTXDrYyR/+dlwE1PLRRIMPB7Szgj5ueC/jWsMuSmZMZb5trD95RTZ5zt3
68+
JlzB41THY+CjMN6GBhkPfgTS0tPweCMheTyaQkFuUzbe3A/HmIqFeQrU75ACGxI6
69+
YDJsVMWKf3QkDtMIW9Lmrt4XR49NrhMAZ0XmvA7uGw1Esgwlbbg4XIfB05gnoVYh
70+
XEIVs/S37K69rq/kUA00fDzhsWT25AdTnZZEikHgPN/y/G3e912MBMrhT8ylxQzO
71+
qPdJtWNrAlMCAwEAAaNTMFEwHQYDVR0OBBYEFPMdoF9pM4qktHaXom6r/aC/8yzO
72+
MB8GA1UdIwQYMBaAFPMdoF9pM4qktHaXom6r/aC/8yzOMA8GA1UdEwEB/wQFMAMB
73+
Af8wDQYJKoZIhvcNAQELBQADggEBAAwbr0jgKf/VIydPC/ZN08ZzE+76uoSeIsbE
74+
NRHTqkIRpU+XOXLV624+0XXcUby8qyoNKKo6LvF/rqAWJwcuo/EG7TObj7U6yoyn
75+
6P65pLNOwSd9eyMzEP4nS6KxajIJMIQk0h0CnUE7uk5R/86Yw8maIrisIVvDiSiO
76+
O2qc01/vmW2s9VaBCZciMZZJuHUdcVx2fWSHdxgwTkP3wxr51c+XKSjPQITaNSm8
77+
9pqe6c74zFcCQRPRYBhBYLcXxrZtcdggUFYTPGwjDpEbL40x6ILacV9sHD/2fyww
78+
R+uJxiibYWJD4jqRSAseKsDZoFlpTxNYzEqKNy7GwaF7A0rly5g=
7979
-----END CERTIFICATE-----

‎mysql-test/std_data/cakey.pem

Lines changed: 26 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -1,28 +1,28 @@
11
-----BEGIN PRIVATE KEY-----
2-
MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCgrdWx7EVv1jP8
3-
WgMpFPGOeNUnU3ngknwQO3mg17adqFxN+mgRswOe7l4geSPYnEk0nB3EblMfmpIf
4-
CMEV4q3PWc0eVYR5+QnKNopQg8Y4SMbT+vbyKk+9XWCd6yHEjPLdLUkQY0ZH3i1Z
5-
oErgWObArtjUXpr49Wgd6oCK1gGw1V8wTYhaxR+BksFAVMi7pqFD3oE8S3mVgrtS
6-
2qOkoGn/fgCMhoXsrwNoqINIoOQdMalcR5mdOj+1PhJ8TUcVcvERXErvCBx7j+YD
7-
BgdPlCGwXif6k4y0zFY0O23EShRXsiEaPi/FnkcaWQUiDlaxp+iAm4LDVFcSBZR5
8-
ogPZZDxjAgMBAAECggEAWmy6AGFpSmEP7IpzkOEaeAWEX5dY1YtaioAOGPiM6vje
9-
yXuMqblG5mBbVIcYJ0T85cCd9/fmi7ifVxvEHh7tle2Bw/p4jXQbkFNVT655FR/P
10-
1Wg9JVeufHFaeETlQgnYe6SKo9BaswNUHkZZHRyq7/D2Ub3UFRt2tq9MG9YIKY1m
11-
rP9s7E+EDuH9UhYmaWdQfNm8muIXWK8WjicI5+PX0CQ1NtUy6vS7qBzcBzvT0chC
12-
Jtja29S6Nvg12A96nHsRmQyUaQjRlqosSwiagpc5mZmNeCEUoY+3deIdYIUMSQnf
13-
judZOKVPq0GOW5Y1U068LGODWaifPkinGBj+04VH0QKBgQDOp/jVCOUdEeqFJ/8m
14-
wEsfsRIrXvtGJHgbDXcVJ69FwlX+yaKGEuC+4f21uyxPn6GoFw+NKAyTmGKH7VAX
15-
OFQLrMQ/DMlNbZrCAAFcXMqrnLaVwqMeIIoVNfKAa8u15K40qc+B0it61Nlay5wq
16-
wvXoSZrdqXSgsI29pav20+8pTQKBgQDHC3l1+gMZ1rCar+5KdVBN1Wq4Xh7cwZw6
17-
FxEvyrDCJePEU2L7FpH1pFuB4WpXdBu3CPo70ZgwfqBXn4qLOOI3gTtDHActyiUm
18-
+WRG62O+5Ye7aLB4xy0MfnKNA2g/yHj1ozwM8kA5JRptAzDnzWfVE0k47/pVAVzt
19-
E2bZuSykbwKBgQCL6SkMgjMr1T9j20phn/q8gBN/DZUtTe+K0Tj4N5/wqLuz/its
20-
fkdutG4ipZBAcCDwPnym4qBxJNBAmqiIr/gm11ceILgBFd2azoodUC1etoDfL6Fj
21-
+j/CUH3X+CM5CJPwz67Pg80wIf7t+7/FK611ELAqtllhmWa9KPcd6yqWWQKBgHh5
22-
Xnvk5kmWY3BNOgrBNOjXWu/asA1n9lpGqfVmVlQ8wL6MxiU5xQCMCYL0X/ws37WK
23-
boMUWmxHyF8gxqd7t5hm1OrKpSG274PGgUZXpRjfLqdlNyLzUzXztvvY6xloCqaK
24-
tYcUfYDZD0SaINi8v7L9KF2ZCsi2uXsZOjBf30BrAoGAXPPotkw/CkcPQBS13cha
25-
ZWeeH5NDKBADWXfLfcRUs108c9xw4BYr5yGilSPscN2ZP0/iWONKp/c6/STS54t5
26-
lkOKKUbkAFbQu8UKa1J7zrnHZv+Mr4I/iBBy6VkN8Spp2vBI3Ng6jhPIJg3Gum9p
27-
943wWtAnIhe/UqCRT3a/GZg=
2+
MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDW1Fxio9eajvNg
3+
pfIHZL34LhZzRB5MWpYHCIiE0E0VgwyvZUxVQpYUgvgAZlsstXvnRKWqTmPh2YgF
4+
KoDC8k1w62Mkf/nZcBNTy0USDDwe0s4I+bngv41rDLkpmTGW+baw/eUU2ec7dyZc
5+
weNUx2PgozDehgYZD34E0tLT8HgjIXk8mkJBblM23twPx5iKhXkK1O+QAhsSOmAy
6+
bFTFin90JA7TCFvS5q7eF0ePTa4TAGdF5rwO7hsNRLIMJW24OFyHwdOYJ6FWIVxC
7+
FbP0t+yuva6v5FANNHw84bFk9uQHU52WRIpB4Dzf8vxt3vddjATK4U/MpcUMzqj3
8+
SbVjawJTAgMBAAECggEAZFozBcjvcD2SpvUdyCJhM0ukJRgO5y/xoTt1OkVrnL7o
9+
8A3ryHAgV1iOrPEjahEk3fWNRa70rY3GIlOmbmptjnAGkghOGCpofN4ZV8LrWqKy
10+
qDKvh7MzRmxdGnd7WMExfCA+IK1hfL+95dqUbQfvOgJBU9Fbi91Wyr4IygQsuouP
11+
Nog3FLz4jejr578qx310Nm0ppNWDa9vWWoiu4bW9u7mqYXhrOiLBxPp/EP2sg5+S
12+
yocjtHSfcrMDBOdiluFWlNyX69uKXWDyge/F9H5whuW5H4JRHv3i3sUcaXK/PF8D
13+
RwJCDiX4E7M7JVG1EgCz4kC0GyTNGihwSTB66DJxcQKBgQDyM+M71wiMQxseCCZa
14+
sBbRfNm100agUNRUBWGrmOLXj6eThkwNknndAZh4nUpuGOYO0CZrnfO4rUBAjpTx
15+
7++0OGJEf7CEX26da5Ge+ywkgxpOaVbhliuDeFZ3Lqy/1UcUVPvxPy27Sc6i6SYt
16+
gKaej3KpyJW0nUi2Fmca1mHp7QKBgQDjEUhYrMJrXLbmR6AELp7sbTTw1fFp2jUC
17+
iiM3lEYfuiUprOCXe6m2yWkd0mF2YyGZt7Z2LMX4jIRe06h4c7WSMuHAbb9Tvro9
18+
Kp7Xgq6+edKSdIQG8mb/UXauEuhqRyt2Y8Xr18yPlmpViI+xiAWT9x/9otpkxMVu
19+
RiUVEWoVPwKBgQDb2AtXgr0Ii9TucplV0eY0aq4247qExDmmtmfMWW72GTgTqWAZ
20+
Ja6l08/xE1y/CKyyH2/wWSQjqmba8lDyNkcO/+r6oCi6TuFZ1I0OkJCl57aWG/m3
21+
tBZ1NGLPtbcqPU5Sfz1c4msBSGJe72AvB0q2PCDpSd/RXL7mQPl/m76ulQKBgALx
22+
7HBJ/VOLJkwiTa8AM8t5NyCQhcsLq3hW9lH4OFic/3Jk7ZzJW9AlGJnsapswefUW
23+
buVle0PX/reEI0E8rvQweMEYK00Ywi2c6eZ9qWqLBfIkVLoKVs+k7NchI6aNOcEV
24+
VjHS4LJUDxkA5mw1CW173QxbGl4IN09Q1ZZKXYfdAoGATv50WfkAxn+wA3R8edUk
25+
ZIqqxoeh3isSN7XSQCypFIKGP0Cmo4cjcvgyXVGYX3b9a2LiNRags/q4S2ZGLz9C
26+
Ksv9uiyKA8THhcdx4RVUQuWEjyGzivwkk9UHTZhwOM+ED0HyE5/gnMs2RJVMMd7W
27+
0tocCTiUvCxfBB3W77Nm48g=
2828
-----END PRIVATE KEY-----

‎mysql-test/std_data/client-cert.pem

Lines changed: 42 additions & 42 deletions
Original file line numberDiff line numberDiff line change
@@ -5,65 +5,65 @@ Certificate:
55
Signature Algorithm: sha256WithRSAEncryption
66
Issuer: CN=cacert, C=FI, ST=Helsinki, L=Helsinki, O=MariaDB
77
Validity
8-
Not Before: Apr 25 20:52:33 2017 GMT
9-
Not After : Apr 20 20:52:33 2037 GMT
8+
Not Before: Apr 24 14:29:50 2019 GMT
9+
Not After : Apr 19 14:29:50 2039 GMT
1010
Subject: C=FI, ST=Helsinki, L=Helsinki, O=MariaDB, CN=client
1111
Subject Public Key Info:
1212
Public Key Algorithm: rsaEncryption
1313
Public-Key: (1024 bit)
1414
Modulus:
15-
00:a1:10:ea:cc:8e:2c:73:6b:33:1a:5e:26:19:b6:
16-
4b:4c:bc:04:b8:c2:e2:33:eb:67:a2:7a:27:af:3f:
17-
f7:ef:49:5f:c1:d2:b9:d9:71:fe:17:a0:93:da:dc:
18-
f1:47:de:fa:1f:c3:c1:d1:a5:2a:06:cb:b3:e8:9a:
19-
c1:bd:78:77:68:45:c1:55:cd:b1:c1:d3:df:8c:12:
20-
4f:c2:3a:0d:b7:58:dc:ca:13:08:b9:fb:12:24:90:
21-
aa:b7:4e:04:eb:43:0d:45:be:1c:17:d6:a8:b1:af:
22-
10:3c:39:d6:08:45:ed:a9:7e:3a:69:ae:70:22:86:
23-
7e:71:1f:f1:0e:d0:0d:32:c3
15+
00:ab:9b:08:e8:ee:c3:21:9e:b5:dc:3e:03:b2:4e:
16+
d5:45:58:7f:dd:95:a1:d9:b1:86:c5:1b:c5:d6:66:
17+
52:73:2c:d4:eb:53:80:0c:02:1d:8b:40:43:b1:e9:
18+
db:a1:87:d7:61:f2:35:b0:4f:bf:1b:20:87:60:6f:
19+
4f:0a:df:8e:1b:32:fb:69:d3:be:24:20:77:be:cf:
20+
f6:4f:23:fc:2c:f4:12:a1:b9:54:7e:74:e2:21:7f:
21+
03:e5:03:a3:17:a6:eb:c5:1b:38:3f:35:9d:b9:67:
22+
73:d3:80:c5:61:f4:8d:48:2e:cf:f0:aa:59:36:7c:
23+
4f:f6:37:f4:b7:7d:fe:1d:87
2424
Exponent: 65537 (0x10001)
2525
X509v3 extensions:
2626
X509v3 Basic Constraints:
2727
CA:FALSE
2828
Netscape Comment:
2929
OpenSSL Generated Certificate
3030
X509v3 Subject Key Identifier:
31-
0C:20:76:A1:80:9C:2F:30:3D:F7:AB:8D:31:19:AD:E2:F7:E2:8D:12
31+
53:3C:D1:92:1E:19:3C:32:DA:BF:5E:2E:11:E8:17:A8:1C:77:27:DE
3232
X509v3 Authority Key Identifier:
33-
keyid:1C:C7:2B:AA:1B:B1:BB:2E:9A:F4:0F:B1:86:60:57:38:C2:41:05:12
33+
keyid:F3:1D:A0:5F:69:33:8A:A4:B4:76:97:A2:6E:AB:FD:A0:BF:F3:2C:CE
3434

3535
Signature Algorithm: sha256WithRSAEncryption
36-
39:c0:90:13:19:85:47:9d:c6:ab:8c:c6:c9:0f:33:11:19:f7:
37-
01:2c:1b:08:f6:81:98:11:ab:48:05:d9:b2:29:56:32:9c:ba:
38-
e5:40:df:85:5e:6d:fd:6e:36:9a:14:eb:90:50:57:de:2f:ed:
39-
2d:89:a6:8a:40:1c:41:84:9b:da:e1:6d:e6:7c:46:b2:e0:90:
40-
93:02:1c:52:2e:af:b4:d4:a1:d8:9d:19:cf:0a:67:bf:c3:3e:
41-
2e:02:f4:3e:bc:2e:59:57:30:85:8a:32:ab:22:88:72:37:6e:
42-
ee:ed:f8:53:72:c9:28:87:50:47:81:1b:80:4c:f8:80:ce:2f:
43-
47:ca:78:ce:38:51:70:ec:df:ee:fc:ea:5a:40:1e:4d:1c:fd:
44-
4e:f6:74:d0:22:a4:7e:57:df:16:1a:a0:8d:be:fe:ee:f2:07:
45-
2e:39:a1:97:40:19:f9:3b:b8:e7:c4:98:6e:1d:1a:27:d3:19:
46-
4c:5c:c9:c3:31:98:c1:3c:27:0e:6a:de:cf:88:72:cf:e4:65:
47-
c9:0d:33:32:f1:ea:f7:dd:5b:9d:42:6d:ee:c7:a8:b7:85:d2:
48-
41:e0:84:38:ce:86:81:ba:6e:7d:d5:ad:7a:00:58:d7:c5:83:
49-
9e:5c:1d:38:32:72:49:f5:42:4b:e7:c6:5c:12:6d:e1:5d:51:
50-
2c:f5:52:f0
36+
8d:f9:38:ab:6e:7b:b5:91:80:f0:51:8f:0c:67:b9:39:64:c1:
37+
5e:e6:da:2b:f6:7c:8d:37:13:d4:47:a3:2f:be:04:53:da:b0:
38+
dc:d1:35:88:ee:3f:52:be:17:ea:ae:ec:2b:cd:e3:cd:6b:8f:
39+
09:e5:c2:aa:9b:50:aa:ea:63:ea:74:97:b5:ab:c9:27:6c:1d:
40+
8a:80:a0:49:7b:0f:6e:77:92:6c:db:0c:a8:c0:5d:c3:6a:54:
41+
24:52:6d:87:22:49:67:68:89:16:35:bc:eb:94:59:f7:2a:55:
42+
dd:50:ca:ee:c8:72:4d:03:92:e3:10:46:d5:20:80:09:cd:db:
43+
fd:c8:b2:de:4f:1f:c9:96:8f:d1:cf:81:99:d2:ab:b9:c5:27:
44+
e0:40:e8:76:e9:a4:4d:c9:03:0b:be:d5:f1:f4:42:ce:2c:83:
45+
6e:3e:80:bd:cb:59:36:4d:34:47:08:91:a8:e1:23:f5:e0:af:
46+
89:ae:1a:74:3e:ea:82:19:07:ef:3c:d6:3f:cf:5c:75:5e:57:
47+
c7:32:17:b1:16:36:7c:7b:a7:45:aa:de:e1:b8:c1:a2:05:1a:
48+
e4:30:51:a3:af:9e:ac:a0:8a:fc:fd:9d:b3:a9:ae:25:62:91:
49+
cb:ee:e7:bc:fc:9c:3c:e9:15:ee:a2:6f:f5:f1:fd:6e:59:a9:
50+
41:0b:c6:7d
5151
-----BEGIN CERTIFICATE-----
5252
MIIDHjCCAgagAwIBAgIBAzANBgkqhkiG9w0BAQsFADBWMQ8wDQYDVQQDDAZjYWNl
5353
cnQxCzAJBgNVBAYTAkZJMREwDwYDVQQIDAhIZWxzaW5raTERMA8GA1UEBwwISGVs
54-
c2lua2kxEDAOBgNVBAoMB01hcmlhREIwHhcNMTcwNDI1MjA1MjMzWhcNMzcwNDIw
55-
MjA1MjMzWjBWMQswCQYDVQQGEwJGSTERMA8GA1UECAwISGVsc2lua2kxETAPBgNV
54+
c2lua2kxEDAOBgNVBAoMB01hcmlhREIwHhcNMTkwNDI0MTQyOTUwWhcNMzkwNDE5
55+
MTQyOTUwWjBWMQswCQYDVQQGEwJGSTERMA8GA1UECAwISGVsc2lua2kxETAPBgNV
5656
BAcMCEhlbHNpbmtpMRAwDgYDVQQKDAdNYXJpYURCMQ8wDQYDVQQDDAZjbGllbnQw
57-
gZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAKEQ6syOLHNrMxpeJhm2S0y8BLjC
58-
4jPrZ6J6J68/9+9JX8HSudlx/hegk9rc8Ufe+h/DwdGlKgbLs+iawb14d2hFwVXN
59-
scHT34wST8I6DbdY3MoTCLn7EiSQqrdOBOtDDUW+HBfWqLGvEDw51ghF7al+Ommu
60-
cCKGfnEf8Q7QDTLDAgMBAAGjezB5MAkGA1UdEwQCMAAwLAYJYIZIAYb4QgENBB8W
61-
HU9wZW5TU0wgR2VuZXJhdGVkIENlcnRpZmljYXRlMB0GA1UdDgQWBBQMIHahgJwv
62-
MD33q40xGa3i9+KNEjAfBgNVHSMEGDAWgBQcxyuqG7G7Lpr0D7GGYFc4wkEFEjAN
63-
BgkqhkiG9w0BAQsFAAOCAQEAOcCQExmFR53Gq4zGyQ8zERn3ASwbCPaBmBGrSAXZ
64-
silWMpy65UDfhV5t/W42mhTrkFBX3i/tLYmmikAcQYSb2uFt5nxGsuCQkwIcUi6v
65-
tNSh2J0Zzwpnv8M+LgL0PrwuWVcwhYoyqyKIcjdu7u34U3LJKIdQR4EbgEz4gM4v
66-
R8p4zjhRcOzf7vzqWkAeTRz9TvZ00CKkflffFhqgjb7+7vIHLjmhl0AZ+Tu458SY
67-
bh0aJ9MZTFzJwzGYwTwnDmrez4hyz+RlyQ0zMvHq991bnUJt7seot4XSQeCEOM6G
68-
gbpufdWtegBY18WDnlwdODJySfVCS+fGXBJt4V1RLPVS8A==
57+
gZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAKubCOjuwyGetdw+A7JO1UVYf92V
58+
odmxhsUbxdZmUnMs1OtTgAwCHYtAQ7Hp26GH12HyNbBPvxsgh2BvTwrfjhsy+2nT
59+
viQgd77P9k8j/Cz0EqG5VH504iF/A+UDoxem68UbOD81nblnc9OAxWH0jUguz/Cq
60+
WTZ8T/Y39Ld9/h2HAgMBAAGjezB5MAkGA1UdEwQCMAAwLAYJYIZIAYb4QgENBB8W
61+
HU9wZW5TU0wgR2VuZXJhdGVkIENlcnRpZmljYXRlMB0GA1UdDgQWBBRTPNGSHhk8
62+
Mtq/Xi4R6BeoHHcn3jAfBgNVHSMEGDAWgBTzHaBfaTOKpLR2l6Juq/2gv/MszjAN
63+
BgkqhkiG9w0BAQsFAAOCAQEAjfk4q257tZGA8FGPDGe5OWTBXubaK/Z8jTcT1Eej
64+
L74EU9qw3NE1iO4/Ur4X6q7sK83jzWuPCeXCqptQqupj6nSXtavJJ2wdioCgSXsP
65+
bneSbNsMqMBdw2pUJFJthyJJZ2iJFjW865RZ9ypV3VDK7shyTQOS4xBG1SCACc3b
66+
/ciy3k8fyZaP0c+BmdKrucUn4EDodumkTckDC77V8fRCziyDbj6AvctZNk00RwiR
67+
qOEj9eCvia4adD7qghkH7zzWP89cdV5XxzIXsRY2fHunRare4bjBogUa5DBRo6+e
68+
rKCK/P2ds6muJWKRy+7nvPycPOkV7qJv9fH9blmpQQvGfQ==
6969
-----END CERTIFICATE-----

0 commit comments

Comments
 (0)