From 36da754d686890cdb2a057b4502f752ce5959e70 Mon Sep 17 00:00:00 2001 From: Daniel Black Date: Tue, 11 Jun 2024 11:54:05 +1000 Subject: [PATCH] test: add tls cert/key/ca from server mysql-test/std_data Add test for #592 --- .test/run.sh | 5 +- .test/tls/cacert.pem | 121 +++++++++++++++++++++++++++++++++++ .test/tls/server-cert.pem | 128 ++++++++++++++++++++++++++++++++++++++ .test/tls/server-key.pem | 51 +++++++++++++++ .test/tls/tls.cnf | 4 ++ 5 files changed, 307 insertions(+), 2 deletions(-) create mode 100644 .test/tls/cacert.pem create mode 100644 .test/tls/server-cert.pem create mode 100644 .test/tls/server-key.pem create mode 100644 .test/tls/tls.cnf diff --git a/.test/run.sh b/.test/run.sh index 7ec7fa26..b7ad77eb 100755 --- a/.test/run.sh +++ b/.test/run.sh @@ -645,9 +645,10 @@ fi sleep 1 done - DOCKER_LIBRARY_START_TIMEOUT=$(( ${DOCKER_LIBRARY_START_TIMEOUT:-10} * 7 )) runandwait -e MARIADB_AUTO_UPGRADE=1 -v m57:/var/lib/mysql:Z "${image}" + # tls test to ensure that #592 is resolved + DOCKER_LIBRARY_START_TIMEOUT=$(( ${DOCKER_LIBRARY_START_TIMEOUT:-10} * 7 )) runandwait -e MARIADB_AUTO_UPGRADE=1 -v "${dir}"/tls:/etc/mysql/conf.d/:z -v m57:/var/lib/mysql:Z "${image}" - version=$(mariadbclient --skip-column-names -B -u root -pbob -e "SELECT VERSION()") + version=$(mariadbclient --skip-column-names --loose-skip-ssl-verify-server-cert -B -u root -pbob -e "SELECT VERSION()") docker exec "$cid" ls -la /var/lib/mysql/system_mysql_backup_unknown_version.sql.zst || die "hoping for backup file" diff --git a/.test/tls/cacert.pem b/.test/tls/cacert.pem new file mode 100644 index 00000000..16d2d68c --- /dev/null +++ b/.test/tls/cacert.pem @@ -0,0 +1,121 @@ +Certificate: + Data: + Version: 3 (0x2) + Serial Number: + 5c:81:fd:b9:82:69:e0:46:8d:99:ed:d0:95:4b:d3:d6:62:8a:69:97 + Signature Algorithm: sha256WithRSAEncryption + Issuer: CN = cacert, C = FI, ST = Helsinki, L = Helsinki, O = MariaDB + Validity + Not Before: Mar 3 03:03:03 2020 GMT + Not After : Feb 27 03:03:03 2040 GMT + Subject: CN = cacert, C = FI, ST = Helsinki, L = Helsinki, O = MariaDB + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + RSA Public-Key: (4096 bit) + Modulus: + 00:bc:72:01:10:68:c1:df:fa:d1:77:55:7c:09:13: + 19:51:41:cd:ed:4f:51:43:22:e7:97:0e:94:fc:0d: + 1d:a9:c6:f3:17:79:31:6f:12:7a:9b:7f:87:e2:55: + 16:d5:a4:dd:6a:d3:5e:4f:e2:e0:bc:c4:9f:c5:95: + 1a:47:13:a5:cd:6d:f3:76:e2:9a:12:31:76:e4:f1: + 01:94:37:45:10:32:18:9e:cc:d8:7f:04:ca:18:97: + bf:22:2e:51:ba:73:6f:46:50:36:fe:df:82:4c:8a: + 9e:34:be:44:f4:12:61:72:18:b3:81:b5:d9:b2:69: + 8f:7d:f4:8b:41:62:34:59:71:f7:e4:26:a6:cf:55: + 4d:d4:52:a3:37:24:bd:82:21:9f:d1:db:cd:e9:12: + a9:cf:60:48:3d:da:ea:a0:a7:d0:57:16:68:49:e5: + b4:e8:dc:d0:b0:12:b3:c7:1c:f1:b3:b1:eb:12:8b: + c7:3e:3c:02:fe:f6:4c:a8:35:d8:cf:74:64:63:89: + 84:3e:75:88:a0:0b:80:5c:ea:68:b2:9c:bb:e3:ae: + 4f:cd:24:b9:97:89:95:4e:3f:78:48:ba:ad:97:4c: + bf:f8:8b:14:80:f4:78:03:11:4b:a7:e3:99:1c:82: + 59:bf:b6:f3:3e:3e:db:db:38:73:91:8d:f0:6f:e5: + 5d:02:e7:c0:a5:8b:ad:69:f1:17:29:2c:16:41:ad: + ac:0f:64:c8:f7:62:58:da:73:66:f7:91:2c:89:f7: + 80:6b:d7:91:f1:c8:4a:5a:c4:2d:3d:0b:18:83:f1: + e9:74:2d:83:bb:09:46:bd:f0:40:ad:0b:dd:0c:45: + 64:8d:9e:cf:a7:a0:6c:d2:cc:f1:f9:05:15:7a:e3: + 02:15:b0:e6:99:cd:81:5b:dd:52:9b:c0:35:25:fa: + 4c:88:47:1d:16:19:9f:9d:f0:54:01:6e:20:6a:10: + ab:4f:d2:a2:a7:31:db:6d:76:26:0d:35:9d:ac:1f: + 4e:4d:37:87:2c:78:26:d4:1f:f0:87:fc:f4:e2:2a: + af:9a:a4:d6:69:93:16:4f:ed:fb:e0:78:99:36:49: + d2:2e:7d:44:15:94:58:bd:ba:bc:d3:b9:75:5c:58: + 13:69:18:8e:5d:0e:c9:0c:dd:06:c4:7b:fc:34:3e: + df:51:46:8d:5e:33:40:ba:39:75:9a:29:a5:f0:be: + d3:a1:2c:72:88:85:4a:a0:2e:d9:71:15:30:49:57: + f4:1b:73:e4:b3:b1:9e:3e:e6:0b:30:0a:eb:e9:cc: + ec:98:4c:36:ea:58:8a:aa:b1:4b:b9:e1:5e:4a:d0: + 81:65:f0:ba:2c:b0:a6:8e:02:f1:c6:e0:78:b9:49: + eb:8e:79 + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Subject Key Identifier: + 4D:FC:7A:19:F3:2B:0C:7D:F6:C0:7C:4D:F8:72:34:4C:8C:35:52:74 + X509v3 Authority Key Identifier: + keyid:4D:FC:7A:19:F3:2B:0C:7D:F6:C0:7C:4D:F8:72:34:4C:8C:35:52:74 + + X509v3 Basic Constraints: critical + CA:TRUE + Signature Algorithm: sha256WithRSAEncryption + 3c:e7:3a:e8:b6:d1:be:ca:27:ad:02:00:08:b7:1f:2d:e9:cd: + 81:9f:98:f0:f0:a4:c5:dd:dc:94:a1:a6:bd:31:56:54:05:6a: + da:b1:1b:42:35:ef:f8:75:1c:0d:0f:00:77:24:a7:ef:5f:f1: + ce:38:3a:05:a7:22:a6:40:b6:6c:57:46:31:e8:ba:2f:b5:9e: + fb:7c:07:93:5c:cb:82:59:1a:2f:13:5b:6d:55:8d:d9:dd:ec: + 44:b2:7f:89:26:37:da:fc:e8:aa:af:87:8b:5e:c3:3e:21:c2: + a0:ca:2a:49:78:fa:9d:10:5c:e8:2c:24:ac:e8:f3:61:25:cb: + 86:6c:8f:1d:4c:2f:83:bd:d4:72:dc:54:1b:fa:3d:1a:d4:54: + a9:ac:87:70:ff:cf:53:26:1f:e7:11:bc:b3:89:d0:71:25:09: + d9:80:09:42:b1:5a:8d:01:a9:89:1e:2c:cc:89:e7:f8:c2:43: + 4b:20:cd:ce:9c:2f:67:99:35:4f:e2:ec:00:07:3d:69:6e:9e: + 48:93:d4:56:b1:0b:52:00:d9:86:05:1e:ea:64:68:a1:87:04: + 0f:17:45:82:8e:f5:13:7a:90:79:c8:fd:42:e8:80:df:3b:46: + bc:39:c9:76:14:90:8e:cd:80:98:84:56:43:88:33:1e:ac:4a: + cb:48:8d:ff:35:d4:68:0e:ef:bf:1a:b5:34:17:7a:c8:c2:e8: + f0:18:f6:58:07:9b:09:9f:b5:e2:29:e2:5e:cb:b9:71:ce:13: + 90:6d:b7:4e:23:31:bc:ab:17:b4:3d:96:17:4b:f8:01:49:b9: + 0a:0c:73:1d:54:de:51:79:3a:fb:f0:b5:10:8d:38:ad:87:36: + 0f:36:48:11:f7:1b:d6:2f:ed:a7:1d:73:74:45:19:69:1d:9f: + 86:ec:a3:2b:8e:fd:5a:33:08:4d:17:41:df:57:8a:1e:99:c1: + bc:aa:15:a1:af:2c:23:67:4e:31:45:91:fb:8f:af:1e:19:a6: + 0f:bb:d9:3a:55:cc:b0:a2:41:a5:99:20:cc:64:91:f7:8e:6b: + c4:ad:5a:c8:ca:3d:74:36:91:97:34:f1:f8:c5:22:87:6b:e3: + cf:9c:0a:75:5a:09:30:88:9d:07:99:2d:ef:87:75:45:ed:0f: + 75:8a:88:6c:b0:7e:dc:c3:d4:50:c4:25:0c:de:f7:53:f6:12: + bd:5a:8b:81:3a:30:83:b7:66:5e:7e:8f:d8:65:ab:2a:fa:85: + d4:4b:61:fb:27:98:79:cb:d6:06:07:23:7f:d9:1d:79:3e:71: + a7:0c:c8:e8:0e:e0:40:66:4d:8d:0e:9c:41:c0:d2:2c:91:95: + 63:d5:c4:12:cd:9b:bc:f4 +-----BEGIN CERTIFICATE----- +MIIFjTCCA3WgAwIBAgIUXIH9uYJp4EaNme3QlUvT1mKKaZcwDQYJKoZIhvcNAQEL +BQAwVjEPMA0GA1UEAwwGY2FjZXJ0MQswCQYDVQQGEwJGSTERMA8GA1UECAwISGVs +c2lua2kxETAPBgNVBAcMCEhlbHNpbmtpMRAwDgYDVQQKDAdNYXJpYURCMB4XDTIw +MDMwMzAzMDMwM1oXDTQwMDIyNzAzMDMwM1owVjEPMA0GA1UEAwwGY2FjZXJ0MQsw +CQYDVQQGEwJGSTERMA8GA1UECAwISGVsc2lua2kxETAPBgNVBAcMCEhlbHNpbmtp +MRAwDgYDVQQKDAdNYXJpYURCMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC +AgEAvHIBEGjB3/rRd1V8CRMZUUHN7U9RQyLnlw6U/A0dqcbzF3kxbxJ6m3+H4lUW +1aTdatNeT+LgvMSfxZUaRxOlzW3zduKaEjF25PEBlDdFEDIYnszYfwTKGJe/Ii5R +unNvRlA2/t+CTIqeNL5E9BJhchizgbXZsmmPffSLQWI0WXH35Camz1VN1FKjNyS9 +giGf0dvN6RKpz2BIPdrqoKfQVxZoSeW06NzQsBKzxxzxs7HrEovHPjwC/vZMqDXY +z3RkY4mEPnWIoAuAXOpospy7465PzSS5l4mVTj94SLqtl0y/+IsUgPR4AxFLp+OZ +HIJZv7bzPj7b2zhzkY3wb+VdAufApYutafEXKSwWQa2sD2TI92JY2nNm95EsifeA +a9eR8chKWsQtPQsYg/HpdC2DuwlGvfBArQvdDEVkjZ7Pp6Bs0szx+QUVeuMCFbDm +mc2BW91Sm8A1JfpMiEcdFhmfnfBUAW4gahCrT9KipzHbbXYmDTWdrB9OTTeHLHgm +1B/wh/z04iqvmqTWaZMWT+374HiZNknSLn1EFZRYvbq807l1XFgTaRiOXQ7JDN0G +xHv8ND7fUUaNXjNAujl1miml8L7ToSxyiIVKoC7ZcRUwSVf0G3Pks7GePuYLMArr +6czsmEw26liKqrFLueFeStCBZfC6LLCmjgLxxuB4uUnrjnkCAwEAAaNTMFEwHQYD +VR0OBBYEFE38ehnzKwx99sB8TfhyNEyMNVJ0MB8GA1UdIwQYMBaAFE38ehnzKwx9 +9sB8TfhyNEyMNVJ0MA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggIB +ADznOui20b7KJ60CAAi3Hy3pzYGfmPDwpMXd3JShpr0xVlQFatqxG0I17/h1HA0P +AHckp+9f8c44OgWnIqZAtmxXRjHoui+1nvt8B5Ncy4JZGi8TW21Vjdnd7ESyf4km +N9r86Kqvh4tewz4hwqDKKkl4+p0QXOgsJKzo82Ely4Zsjx1ML4O91HLcVBv6PRrU +VKmsh3D/z1MmH+cRvLOJ0HElCdmACUKxWo0BqYkeLMyJ5/jCQ0sgzc6cL2eZNU/i +7AAHPWlunkiT1FaxC1IA2YYFHupkaKGHBA8XRYKO9RN6kHnI/ULogN87Rrw5yXYU +kI7NgJiEVkOIMx6sSstIjf811GgO778atTQXesjC6PAY9lgHmwmfteIp4l7LuXHO +E5Btt04jMbyrF7Q9lhdL+AFJuQoMcx1U3lF5OvvwtRCNOK2HNg82SBH3G9Yv7acd +c3RFGWkdn4bsoyuO/VozCE0XQd9Xih6ZwbyqFaGvLCNnTjFFkfuPrx4Zpg+72TpV +zLCiQaWZIMxkkfeOa8StWsjKPXQ2kZc08fjFIodr48+cCnVaCTCInQeZLe+HdUXt +D3WKiGywftzD1FDEJQze91P2Er1ai4E6MIO3Zl5+j9hlqyr6hdRLYfsnmHnL1gYH +I3/ZHXk+cacMyOgO4EBmTY0OnEHA0iyRlWPVxBLNm7z0 +-----END CERTIFICATE----- diff --git a/.test/tls/server-cert.pem b/.test/tls/server-cert.pem new file mode 100644 index 00000000..b0bb96ae --- /dev/null +++ b/.test/tls/server-cert.pem @@ -0,0 +1,128 @@ +Certificate: + Data: + Version: 3 (0x2) + Serial Number: 1 (0x1) + Signature Algorithm: sha256WithRSAEncryption + Issuer: CN=cacert, C=FI, ST=Helsinki, L=Helsinki, O=MariaDB + Validity + Not Before: Mar 3 03:03:03 2020 GMT + Not After : Feb 27 03:03:03 2040 GMT + Subject: C=FI, ST=state or province within country, in other certificates in this file it is the same as L, L=location, usually an address but often ambiguously used, O=organization name, typically a company name, OU=organizational unit name, a division name within an organization, CN=localhost + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + RSA Public-Key: (4096 bit) + Modulus: + 00:c9:f9:46:27:69:68:4b:5a:26:dd:1f:98:0f:44: + ba:40:83:ca:82:c2:7a:53:cc:b9:30:f1:ca:3e:e2: + 6d:de:3a:11:aa:ce:c5:90:27:e6:f3:4f:3b:e9:af: + 1a:ec:21:d7:ca:14:1f:f1:9b:cb:cd:7e:57:b4:c8: + 5d:6c:cd:5a:54:dd:8a:9a:a9:27:ef:49:d3:6c:ac: + 99:2d:dc:e5:c0:1e:3c:05:9f:c5:04:c7:2d:81:66: + 21:27:16:d6:c3:e4:97:53:db:21:a6:43:50:70:cb: + 2e:95:fb:da:52:55:27:1b:17:ef:19:83:eb:ff:a1: + fc:62:63:ea:2f:fe:53:35:e6:d9:bc:03:2d:e5:c2: + 18:b1:29:91:e4:a4:79:2c:f1:05:dd:d5:3f:ff:b1: + 9e:64:8d:60:29:74:43:f0:3d:31:e7:78:ce:9f:17: + 74:e5:9f:fb:7b:69:a9:45:3b:e8:76:03:c6:ca:52: + 85:84:50:0d:2b:98:6f:ff:d8:41:66:6d:39:f6:1a: + a3:61:e2:82:5f:dc:ec:ca:97:dc:b2:dc:cf:aa:97: + ef:13:10:ea:fb:8f:99:91:bb:d9:e8:61:25:2d:68: + 04:af:2f:89:56:0d:89:90:77:e0:ad:c2:25:eb:3c: + d2:4e:3d:ca:6e:ae:35:c8:f2:94:7a:09:74:d3:8e: + 73:30:e6:39:fe:b6:9c:c7:4d:23:4e:b0:bf:90:97: + 29:b2:b3:30:b2:bb:49:ae:47:09:fe:cd:23:3a:01: + a4:ac:cb:53:25:74:98:27:20:85:6b:18:74:bb:1c: + bf:ff:05:dc:06:7c:02:78:81:1e:96:ad:8f:c6:a2: + 0d:b3:5c:8e:ad:d5:fd:af:c5:8d:8b:9f:31:b1:4f: + a7:1e:9b:cd:57:68:d5:ad:ed:4e:7b:5f:0d:0c:d2: + 47:85:b4:65:4b:23:1c:5b:a5:ec:88:fa:42:80:73: + 84:cb:75:05:a6:39:f1:e6:a9:4e:15:e6:2f:f7:61: + 0b:f3:08:cc:a6:2b:2b:64:6e:04:a1:fc:da:5e:34: + ad:7c:54:be:85:e4:ed:64:74:31:30:2a:ed:ab:3e: + d2:cd:c7:3e:de:18:04:8a:a7:bd:ad:52:74:13:b1: + b0:7d:4d:7e:87:7b:cb:82:1f:29:11:e1:0e:4b:42: + 2b:83:e8:88:7e:92:80:20:eb:ee:da:d4:dd:1e:9c: + 54:5c:67:a7:00:5f:a1:b7:bf:5d:c0:5a:25:2a:c1: + 1e:7c:93:32:dd:17:c8:02:6d:1a:42:26:f6:50:01: + 4b:df:29:7f:72:f1:90:72:80:8a:ba:2f:8c:86:7d: + 56:45:c5:0e:82:16:d8:29:03:57:87:ce:22:1c:7f: + 31:a8:4f + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Basic Constraints: + CA:FALSE + Netscape Comment: + OpenSSL Generated Certificate + X509v3 Subject Key Identifier: + DB:DF:8B:BC:C2:EE:A9:2A:4E:FD:0E:7A:5F:15:CF:94:A3:0C:CA:CC + X509v3 Authority Key Identifier: + keyid:4D:FC:7A:19:F3:2B:0C:7D:F6:C0:7C:4D:F8:72:34:4C:8C:35:52:74 + + Signature Algorithm: sha256WithRSAEncryption + 09:d1:af:0e:0b:e8:a2:5e:c8:ee:0a:9f:21:c3:2c:da:a4:38: + d5:cc:a6:ca:8e:ef:df:94:ab:32:5a:ec:32:84:01:7a:97:bb: + 38:e0:a8:7d:20:d9:ca:51:3d:a3:74:f9:fe:85:14:26:95:37: + de:2d:74:7e:16:eb:14:14:1b:80:e9:12:54:de:cc:94:cc:38: + ca:df:9a:d0:ce:3e:6c:f1:de:e8:40:f5:3e:6e:c0:ee:05:50: + 5a:38:4b:97:69:3c:7a:1f:a8:11:67:e5:9a:9e:50:2e:62:e8: + f8:bf:1a:54:84:ad:9d:0e:1e:ec:64:22:1b:38:85:87:0b:f3: + c7:47:80:aa:c1:99:72:a5:0d:fd:ce:2c:6e:0d:52:4d:d7:55: + 2f:4e:52:6e:4a:b9:9a:61:34:08:59:d9:30:cc:30:4a:dc:35: + 34:b9:b0:a4:97:a1:b8:d7:ce:ee:63:2d:3a:ad:73:9c:99:49: + 11:0a:04:94:60:97:19:4f:4b:66:d4:fb:bf:14:46:39:27:da: + 01:3f:d8:6a:46:cb:77:12:f2:77:86:3a:45:e1:f7:44:3d:2b: + 3d:e6:26:06:5e:29:20:be:1f:aa:74:43:0c:85:79:e2:14:9c: + 03:bf:49:21:64:7e:c3:4a:7b:a1:60:f6:ce:fb:7c:59:e4:65: + 7c:fb:1e:84:38:53:ec:1f:80:c2:b5:f7:c2:0e:46:19:4b:4d: + a3:32:6e:59:40:32:9b:6b:2c:bb:fa:1a:89:2e:96:22:71:d5: + 71:92:9b:0d:86:0e:60:60:19:ba:34:22:e1:f1:f3:c9:87:5c: + 5c:f5:d3:52:1c:11:0d:d3:91:7a:6b:bd:6f:cc:ba:78:60:e0: + 20:b4:c2:d1:91:70:5f:74:33:a1:bc:aa:db:d1:35:91:b5:cb: + 46:a8:28:7a:26:fc:8c:6c:64:05:4d:73:f1:00:bb:eb:70:87: + fd:9f:04:55:8f:7b:00:b1:c0:50:09:3a:58:44:19:a7:bd:f1: + 34:5b:4d:d9:10:6b:d5:38:fa:64:f5:d3:28:4f:c4:23:14:29: + 98:3e:2f:c2:87:6f:69:a0:89:0e:ee:f7:c4:50:9e:33:b9:0a: + 84:f0:c6:38:45:38:91:10:14:ac:c4:03:8e:4b:e2:61:f9:78: + 85:02:b9:c6:d5:c2:9f:ba:ac:21:1a:3a:4e:1a:f8:a9:12:ae: + 67:37:79:ce:ec:94:54:cf:28:c4:33:3b:45:23:d2:cb:37:3b: + 09:ee:e2:c4:9f:12:dc:e3:8f:06:1d:d5:54:b7:73:2c:34:36: + 97:41:91:81:30:06:2c:90:14:9b:aa:4e:33:2a:38:29:f5:3d: + f4:c7:f2:03:6d:d9:d7:3e +-----BEGIN CERTIFICATE----- +MIIGlTCCBH2gAwIBAgIBATANBgkqhkiG9w0BAQsFADBWMQ8wDQYDVQQDDAZjYWNl +cnQxCzAJBgNVBAYTAkZJMREwDwYDVQQIDAhIZWxzaW5raTERMA8GA1UEBwwISGVs +c2lua2kxEDAOBgNVBAoMB01hcmlhREIwHhcNMjAwMzAzMDMwMzAzWhcNNDAwMjI3 +MDMwMzAzWjCCAUcxCzAJBgNVBAYTAkZJMWEwXwYDVQQIDFhzdGF0ZSBvciBwcm92 +aW5jZSB3aXRoaW4gY291bnRyeSwgaW4gb3RoZXIgY2VydGlmaWNhdGVzIGluIHRo +aXMgZmlsZSBpdCBpcyB0aGUgc2FtZSBhcyBMMUAwPgYDVQQHDDdsb2NhdGlvbiwg +dXN1YWxseSBhbiBhZGRyZXNzIGJ1dCBvZnRlbiBhbWJpZ3VvdXNseSB1c2VkMTQw +MgYDVQQKDCtvcmdhbml6YXRpb24gbmFtZSwgdHlwaWNhbGx5IGEgY29tcGFueSBu +YW1lMUkwRwYDVQQLDEBvcmdhbml6YXRpb25hbCB1bml0IG5hbWUsIGEgZGl2aXNp +b24gbmFtZSB3aXRoaW4gYW4gb3JnYW5pemF0aW9uMRIwEAYDVQQDDAlsb2NhbGhv +c3QwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDJ+UYnaWhLWibdH5gP +RLpAg8qCwnpTzLkw8co+4m3eOhGqzsWQJ+bzTzvprxrsIdfKFB/xm8vNfle0yF1s +zVpU3YqaqSfvSdNsrJkt3OXAHjwFn8UExy2BZiEnFtbD5JdT2yGmQ1Bwyy6V+9pS +VScbF+8Zg+v/ofxiY+ov/lM15tm8Ay3lwhixKZHkpHks8QXd1T//sZ5kjWApdEPw +PTHneM6fF3Tln/t7aalFO+h2A8bKUoWEUA0rmG//2EFmbTn2GqNh4oJf3OzKl9yy +3M+ql+8TEOr7j5mRu9noYSUtaASvL4lWDYmQd+CtwiXrPNJOPcpurjXI8pR6CXTT +jnMw5jn+tpzHTSNOsL+QlymyszCyu0muRwn+zSM6AaSsy1MldJgnIIVrGHS7HL// +BdwGfAJ4gR6WrY/Gog2zXI6t1f2vxY2LnzGxT6cem81XaNWt7U57Xw0M0keFtGVL +IxxbpeyI+kKAc4TLdQWmOfHmqU4V5i/3YQvzCMymKytkbgSh/NpeNK18VL6F5O1k +dDEwKu2rPtLNxz7eGASKp72tUnQTsbB9TX6He8uCHykR4Q5LQiuD6Ih+koAg6+7a +1N0enFRcZ6cAX6G3v13AWiUqwR58kzLdF8gCbRpCJvZQAUvfKX9y8ZBygIq6L4yG +fVZFxQ6CFtgpA1eHziIcfzGoTwIDAQABo3sweTAJBgNVHRMEAjAAMCwGCWCGSAGG ++EIBDQQfFh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQU +29+LvMLuqSpO/Q56XxXPlKMMyswwHwYDVR0jBBgwFoAUTfx6GfMrDH32wHxN+HI0 +TIw1UnQwDQYJKoZIhvcNAQELBQADggIBAAnRrw4L6KJeyO4KnyHDLNqkONXMpsqO +79+UqzJa7DKEAXqXuzjgqH0g2cpRPaN0+f6FFCaVN94tdH4W6xQUG4DpElTezJTM +OMrfmtDOPmzx3uhA9T5uwO4FUFo4S5dpPHofqBFn5ZqeUC5i6Pi/GlSErZ0OHuxk +Ihs4hYcL88dHgKrBmXKlDf3OLG4NUk3XVS9OUm5KuZphNAhZ2TDMMErcNTS5sKSX +objXzu5jLTqtc5yZSREKBJRglxlPS2bU+78URjkn2gE/2GpGy3cS8neGOkXh90Q9 +Kz3mJgZeKSC+H6p0QwyFeeIUnAO/SSFkfsNKe6Fg9s77fFnkZXz7HoQ4U+wfgMK1 +98IORhlLTaMybllAMptrLLv6GokuliJx1XGSmw2GDmBgGbo0IuHx88mHXFz101Ic +EQ3TkXprvW/Munhg4CC0wtGRcF90M6G8qtvRNZG1y0aoKHom/IxsZAVNc/EAu+tw +h/2fBFWPewCxwFAJOlhEGae98TRbTdkQa9U4+mT10yhPxCMUKZg+L8KHb2mgiQ7u +98RQnjO5CoTwxjhFOJEQFKzEA45L4mH5eIUCucbVwp+6rCEaOk4a+KkSrmc3ec7s +lFTPKMQzO0Uj0ss3Ownu4sSfEtzjjwYd1VS3cyw0NpdBkYEwBiyQFJuqTjMqOCn1 +PfTH8gNt2dc+ +-----END CERTIFICATE----- diff --git a/.test/tls/server-key.pem b/.test/tls/server-key.pem new file mode 100644 index 00000000..20b64cac --- /dev/null +++ b/.test/tls/server-key.pem @@ -0,0 +1,51 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIJKgIBAAKCAgEAyflGJ2loS1om3R+YD0S6QIPKgsJ6U8y5MPHKPuJt3joRqs7F +kCfm80876a8a7CHXyhQf8ZvLzX5XtMhdbM1aVN2Kmqkn70nTbKyZLdzlwB48BZ/F +BMctgWYhJxbWw+SXU9shpkNQcMsulfvaUlUnGxfvGYPr/6H8YmPqL/5TNebZvAMt +5cIYsSmR5KR5LPEF3dU//7GeZI1gKXRD8D0x53jOnxd05Z/7e2mpRTvodgPGylKF +hFANK5hv/9hBZm059hqjYeKCX9zsypfcstzPqpfvExDq+4+ZkbvZ6GElLWgEry+J +Vg2JkHfgrcIl6zzSTj3Kbq41yPKUegl0045zMOY5/racx00jTrC/kJcpsrMwsrtJ +rkcJ/s0jOgGkrMtTJXSYJyCFaxh0uxy//wXcBnwCeIEelq2PxqINs1yOrdX9r8WN +i58xsU+nHpvNV2jVre1Oe18NDNJHhbRlSyMcW6XsiPpCgHOEy3UFpjnx5qlOFeYv +92EL8wjMpisrZG4EofzaXjStfFS+heTtZHQxMCrtqz7Szcc+3hgEiqe9rVJ0E7Gw +fU1+h3vLgh8pEeEOS0Irg+iIfpKAIOvu2tTdHpxUXGenAF+ht79dwFolKsEefJMy +3RfIAm0aQib2UAFL3yl/cvGQcoCKui+Mhn1WRcUOghbYKQNXh84iHH8xqE8CAwEA +AQKCAgEAtn2LvKqJ+KOhP+R/ETSpEQfDX7h2rObqYWXmtkECwms3cVzYtzLGgwsR +eEimC7tcbZMXdceuMqM4ffkYKOm2970gsjOrCJNs++FLmlvgH2FyHCbK7lFFNYjg +5Z/GN0OA09zIH6Dsuq1rD0t7bS7RYbKTcDt5bgWftArRG8IwzyAhlbZNry5b/x8v +Wiad8lRoV5KJ++8xzWrL+0i45gV05M+L6cVY8u1FXbIPpqXFmXQ6Fq7PQsjNzZkz +gTiVhwWj/FD/VL9Dy3gjX74tRFMtM9eJxXFg0CFkwX+5GTVFUSyOJvfNoDolFKqs +EHO+rTjMULOWB8FSiZldPJL0wv4P5wEAZ+aqQ4mWsDHVDyACRlmLbOvMriiHrCMj +uDOWQwMsWOc/vCt6WPuNv3PlagACqOGQf0Pj62OcWTJGRzHoOXCw1OMgW3nNgg9X +f5UvXE8nn1hfJMePh6u1BXuOmoyOi2zTIng8ubfE8nw4pw35fkvfkY8BqllUw0XO +Kq5ICr1eqrHJNnicL+ITfiFm7yo0qUPlQnkBA7pCvrNDEdh6mLIEUE/NSqZd2XKB +TZeXLh6/0+djK1899sTsjr75yB1mVc6Jgo0OC4Em6T/u+VKw5LptxAoBnY7et2/7 +6oJe8trQDEwBBE0ihwAvlElwG+kUyKS7P01Ow7ctmYzUuDoLgqECggEBAOV6LQ2H +/OfKfgyP/0pM3ngDUC0H49FLIXAKRdY/gLzecPauTleUX1aGOBkfscuHlKjKCllS +qUCHBLyE3bwAK5t0E3aHLtV9gGjNZvi7O6DZHwnMWP5AwN+eW1TASWUKfPVS6uUk +uMzkTkUowDK38EF7iabinSEYmpNxt0G7T4K9pV6O2HgMkKdIHvyxJ0dME3VOgG6m +miYTe2faRDaqRNY2Kn/r1NhSpRKb/iBovFcHLEQpffbtoJs4hzSUa8gk+iTk7WRX +k5a/74nJpB+v1m8ywHEmZ9wFBTCjoVNzBj0f7vZOrs6pP/3niJPEbyi1oK42I1GN +g6J16jgjVv+Q21ECggEBAOFRUVM61Yqz9mt34MqJgp0bqGEShDuFY4kvttAbtHK5 +FLYc2Jxvn657jp1r2ksAb6UsDbp92UXmxxTw5H+PWsQ/nbNxmhPfjbjdvhoB4IHr +l3YxgWL9Ex0bi1vB8i/RYEOZs+Q9yyjB7rJqR6gw2jDJ0CQe/RsZUFh4RdzvrWoz +gqddlFUzfkS8KAjvmUA6rOrAgIdYhBRP85gXDtV+bc331q6NH8wu0hkJ0Q6gj0WZ +l/Nu1wWg8goHMuCU5GCDtrjQaXSECCo+XL4+VheGk8ZkDF+EkD4tW0oRKyao1rex ++aZ7IykGikXpMGtoQ+gUyiQzOzodFD5aycfJ+vO0IZ8CggEBANHXREWAWfM3xsYE +E2XFHxZNqU5UTa5AbqY+rpf5X+bV3iSlRfxuMDQ17iyDQBkmtPkYMBh4L09TaDBf +q0fUPAwePAICIgCVkAvF8Gh5BlDS2sAh/isZ2YVjEI9SeosL6TKIjUXWq6qpBy3U +0tROQUQQDNLvnNH75rX3oaVY/J9IfmUWaLp2evyNRdC6ynk3BwAZNfZ5ILK60/km +rYPzdZkQ1RI+/FaIVGzM+rh2LevDImZ+LrLTny7xpSmeo2TU820zbiV4s/yBLTEp +k4xqRcNPfIy7mvOmH5XXu5lMsKLKhcD0OIPAX0T2KX0+fouScwl7dhaIOpwgCXsm +TdLLitECggEAcJMYduUmXC6eKAO1JHyf7a8r6ZQ+zR5QJPLZ/BBbkBY46uRutXpv +5dWF49FHN8H4BiaElXDbZblwLl5NTA5r4zGFsWpI+TTwsjTYDlZxvXfgLQV/B945 +9okUj7vPLWUHG79nydm17581i57ePoJqAYZToDh7bVawdgNhpIl7s1wZI1X2Druz +ktQPjKdpglXOn1ue3AC1vRBVPOAIYVLRud7iPEP2ZyXdgvUMpqpB6xxadx4iAIXx +aGFAYkUB9dbZLG20wqpVCgYugD7U9NwgaTcDl5W8G9S9j7wUOzSQUydw/GT5pD3I +SDXCI2fsxb/dX0jZhqeQvbbOqiuYXrrZMQKCAQEAqE3ZWDqhx4obUCkAiSnADnmh +v4/yzeHByCXH71uhou/C+y1f3RQLIZN8oAgnSKpFeAdue3Gwk6BA8FYBjSF2hhrM +LaYkzZ0fhFKhTbNmJ2LVJgFtOO8C/95UWY9tKuToRfndXv+99c1d1o85C97KE7C1 +zREnTgIf990e5gx2KQCA5irELpKltu0g1wDfbD6hCxJhuvsg869Q0JcXcktg8c0D +sbJQWZrlr9i7TG6TEs7bWxH77hOdrpPyaRUiELt8ZfJJrrctYaY4ogd8NDctDbma +WJWdco8kyiWauoRBJuJJwRtTTMQ+JBiomOhDb1moQd19lNQiBjW5pTfr92NSVg== +-----END RSA PRIVATE KEY----- diff --git a/.test/tls/tls.cnf b/.test/tls/tls.cnf new file mode 100644 index 00000000..b0d07775 --- /dev/null +++ b/.test/tls/tls.cnf @@ -0,0 +1,4 @@ + +[mariadb] +ssl-cert=/etc/mysql/conf.d/server-cert.pem +ssl-key=/etc/mysql/conf.d/server-key.pem