| Current Path : /usr/opt/mysql57/mysql-test/suite/group_replication/r/ |
FreeBSD hs32.drive.ne.jp 9.1-RELEASE FreeBSD 9.1-RELEASE #1: Wed Jan 14 12:18:08 JST 2015 root@hs32.drive.ne.jp:/sys/amd64/compile/hs32 amd64 |
| Current File : //usr/opt/mysql57/mysql-test/suite/group_replication/r/gr_ssl_options.result |
include/group_replication.inc
Warnings:
Note #### Sending passwords in plain text without SSL/TLS is extremely insecure.
Note #### Storing MySQL user name or password information in the master info repository is not secure and is therefore not recommended. Please consider using the USER and PASSWORD connection options for START SLAVE; see the 'START SLAVE Syntax' in the MySQL Manual for more information.
[connection server1]
#
# Setup the first member with a recovery user that requires SSL
#
server1
set session sql_log_bin=0;
CREATE USER 'rec_ssl_user'@'%' REQUIRE SSL;
GRANT replication slave ON *.* TO 'rec_ssl_user'@'%';
set session sql_log_bin=1;
#
# Add some data and start the first member
#
CREATE TABLE t1 (c1 INT NOT NULL PRIMARY KEY) ENGINE=InnoDB;
INSERT INTO t1 VALUES (1);
include/start_and_bootstrap_group_replication.inc
#
# Verify that we cannot set invalid and really long paths in the SSL options
#
server2
SET GLOBAL group_replication_recovery_ssl_verify_server_cert= NULL;
ERROR 42000: Variable 'group_replication_recovery_ssl_verify_server_cert' can't be set to the value of 'NULL'
SET GLOBAL group_replication_recovery_ssl_verify_server_cert= "a";
ERROR 42000: Variable 'group_replication_recovery_ssl_verify_server_cert' can't be set to the value of 'a'
SET GLOBAL group_replication_recovery_ssl_verify_server_cert= 1.2;
ERROR 42000: Incorrect argument type to variable 'group_replication_recovery_ssl_verify_server_cert'
SET GLOBAL group_replication_recovery_use_ssl= NULL;
ERROR 42000: Variable 'group_replication_recovery_use_ssl' can't be set to the value of 'NULL'
SET GLOBAL group_replication_recovery_use_ssl= "a";
ERROR 42000: Variable 'group_replication_recovery_use_ssl' can't be set to the value of 'a'
SET GLOBAL group_replication_recovery_use_ssl= 1.2;
ERROR 42000: Incorrect argument type to variable 'group_replication_recovery_use_ssl'
SET GLOBAL group_replication_recovery_ssl_ca= 'long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/';
ERROR 42000: The given value for recovery ssl option is invalid as its length is beyond the limit
SET GLOBAL group_replication_recovery_ssl_capath= 'long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/';
ERROR 42000: The given value for recovery ssl option is invalid as its length is beyond the limit
SET GLOBAL group_replication_recovery_ssl_cert= 'long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/';
ERROR 42000: The given value for recovery ssl option is invalid as its length is beyond the limit
SET GLOBAL group_replication_recovery_ssl_cipher= 'long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/';
ERROR 42000: The given value for recovery ssl option is invalid as its length is beyond the limit
SET GLOBAL group_replication_recovery_ssl_key= 'long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/';
ERROR 42000: The given value for recovery ssl option is invalid as its length is beyond the limit
SET GLOBAL group_replication_recovery_ssl_crl= 'long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/';
ERROR 42000: The given value for recovery ssl option is invalid as its length is beyond the limit
SET GLOBAL group_replication_recovery_ssl_crlpath= 'long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/long_path/';
ERROR 42000: The given value for recovery ssl option is invalid as its length is beyond the limit
#
# See when SSL is required that Recovery cannot advance when not properly configured
#
set session sql_log_bin=0;
call mtr.add_suppression("There was an error when connecting to the donor*");
call mtr.add_suppression("For details please check performance_schema.replication_connection_status table and error log messages of Slave I/O for channel group_replication_recovery.");
call mtr.add_suppression("Maximum number of retries when*");
call mtr.add_suppression("Fatal error during the Recovery process of Group Replication. The server will leave the group.");
call mtr.add_suppression("The member is leaving a group without being on one");
call mtr.add_suppression("The member is already leaving or joining a group.");
call mtr.add_suppression("Error leaving the group");
call mtr.add_suppression("Skipping leave operation: concurrent attempt to leave the group is on-going.");
set session sql_log_bin=1;
CHANGE MASTER TO MASTER_USER= 'rec_ssl_user', MASTER_PASSWORD='' FOR CHANNEL 'group_replication_recovery';
SET GLOBAL group_replication_recovery_use_ssl=1;
SET GLOBAL group_replication_recovery_ssl_ca= '/bad_path_parameter/file';
SET GLOBAL group_replication_recovery_retry_count= 1;
SET GLOBAL group_replication_group_name= 'ebe0b000-f0e7-11e4-b80c-0800200c9a66';
include/start_group_replication.inc
SET @@GLOBAL.group_replication_recovery_retry_count= CONF_REC_RETRIES;
include/stop_group_replication.inc
#
# See that when SSL is properly configured all goes fine
#
SET GLOBAL group_replication_recovery_use_ssl=1;
SET GLOBAL group_replication_recovery_ssl_verify_server_cert=1;
SET GLOBAL group_replication_recovery_ssl_ca= 'TMPDIR/certs/cacerts/cacert.pem';
SET GLOBAL group_replication_recovery_ssl_capath= '';
SET GLOBAL group_replication_recovery_ssl_cert= 'TMPDIR/certs/client-cert.pem';
SET GLOBAL group_replication_recovery_ssl_key= 'TMPDIR/certs/client-key.pem';
include/start_group_replication.inc
SET GLOBAL group_replication_recovery_ssl_cipher= 'AES128-SHA';
#
# Check the data is there
#
include/rpl_sync.inc
include/assert.inc [On the recovered member, the table should exist and have 1 elements;]
#
# Clean up
#
SET @@GLOBAL.group_replication_recovery_use_ssl= 0;
SET @@GLOBAL.group_replication_recovery_ssl_verify_server_cert= 0;
SET @@GLOBAL.group_replication_recovery_retry_count= 10;
SET @@GLOBAL.group_replication_recovery_ssl_ca= "";
SET @@GLOBAL.group_replication_recovery_ssl_capath= "";
SET @@GLOBAL.group_replication_recovery_ssl_cert= "";
SET @@GLOBAL.group_replication_recovery_ssl_cipher= "";
SET @@GLOBAL.group_replication_recovery_ssl_key= "";
server1
set session sql_log_bin=0;
DROP USER 'rec_ssl_user';
set session sql_log_bin=1;
DROP TABLE t1;
include/group_replication_end.inc