diff options
Diffstat (limited to '')
| -rw-r--r-- | mysql-test/main/tls_version.test | 19 |
1 files changed, 8 insertions, 11 deletions
diff --git a/mysql-test/main/tls_version.test b/mysql-test/main/tls_version.test index 50448f89..d973f151 100644 --- a/mysql-test/main/tls_version.test +++ b/mysql-test/main/tls_version.test @@ -2,24 +2,21 @@ # with support for SSL. -- source include/have_ssl_communication.inc -#default is highest available version: TLSv1.2 +--echo #default is highest available version: TLSv1.2 --exec $MYSQL --host=localhost --ssl -e "show status like 'ssl_version';" -# TLSv1.2 +--echo # TLSv1.2 --exec $MYSQL --host=localhost --ssl --tls_version=TLSv1.2 -e "show status like 'ssl_version';" -# TLSv1.1 +--echo # TLSv1.1 --exec $MYSQL --host=localhost --ssl --tls_version=TLSv1.1 -e "show status like 'ssl_version';" -# if a gap is between TLS versions, lowest version number should be used (TLS1.1) +--echo # if a gap is between TLS versions, lowest version number should be used (TLS1.1) --exec $MYSQL --host=localhost --ssl --tls_version=TLSv1.1,TLSv1.3 -e "show status like 'ssl_version';" -# TLSv1.3 is not enabled, so TLSv1.2 should be used +--echo # TLSv1.3 is not enabled, so TLSv1.2 should be used --exec $MYSQL --host=localhost --ssl --tls_version=TLSv1.2,TLSv1.3 -e "show status like 'ssl_version';" -# Highest TLS version number should be used (TLSv1.2) +--echo # Highest TLS version number should be used (TLSv1.2) --exec $MYSQL --host=localhost --ssl --tls_version=TLSv1.1,TLSv1.2 -e "show status like 'ssl_version';" -# Errors: -# TLS v1.0 is disabled on server, so we should get an error ---replace_regex /2026 SSL connection error.*/2026 SSL connection error: xxxx/ ---error 1 +--echo # TLS v1.0 is no longer supported, an attempt to set it is ignored --exec $MYSQL --host=localhost --ssl --tls_version=TLSv1.0 -e "show status like 'ssl_version';" -# finally list available protocols +--echo # finally list available protocols --exec $MYSQL --host=localhost --ssl -e "select @@tls_version;" call mtr.add_suppression("TLSv1.0 and TLSv1.1 are insecure"); |