1. 18 Apr, 2006 1 commit
    • unknown's avatar
      Bug#17208 SSL: client does not verify server certificate · c1d64ccc
      unknown authored
       - Add new function 'ssl_verify_server_cert' which is used if we are 
         connecting to the server with SSL. It will compare the hostname in 
         the server's cert against the hostname that we used when connecting 
         to the server. Will reject the connection if hostname does not match.
       - Add new option "OPT_SSL_VERIFY_SERVER_CERT" to be passed to mysql_options
         which will turn on checking of servers cert.
       - Add new argument "ssl-verify-server-cert" to all mysql* clients which 
         will activate the above option.
       - Generate a new server cert with 1024 bits that has "localhost" as the server name.
      
      
      SSL/server-cert.pem:
        Generate a new server cert that has "localhost" as CN, so that we can test to verify the hostname we connected against with the hostname in the cert
      client/client_priv.h:
        Add OPT_SSL_VERIFY_CERT
      client/mysql.cc:
        Pass the variable "opt_ssl_verify_server_cert" to the mysql_options function. It's processed/included by include/sslopt*.h files
      client/mysqladmin.cc:
        Pass the variable "opt_ssl_verify_server_cert" to the mysql_options function. It's processed/included by include/sslopt*.h files
      client/mysqldump.c:
        Pass the variable "opt_ssl_verify_server_cert" to the mysql_options function. It's processed/included by include/sslopt*.h files
      client/mysqlimport.c:
        Pass the variable "opt_ssl_verify_server_cert" to the mysql_options function. It's processed/included by include/sslopt*.h files
      client/mysqlshow.c:
        Pass the variable "opt_ssl_verify_server_cert" to the mysql_options function. It's processed/included by include/sslopt*.h files
      client/mysqltest.c:
        Always set opt_ssl_verify_server_cert on in mysqltest if we are using SSL
      include/mysql.h:
        Add variable ssl_verify_cerver_cert
      include/sslopt-longopts.h:
        Add ssl-verify-server-cert options to all clients.
      include/sslopt-vars.h:
        Add opt_ssl_varify_server_cert to all clients.
      sql-common/client.c:
        Add ssl_vertify_server_cert function which is executed if user has set the option ssl_verify_cerver_cert
      vio/viosslfactories.c:
        Ask the SSL library to verify servers cert by setting the SSL_VERIFY_PEER flag
      c1d64ccc
  2. 12 Apr, 2006 3 commits
    • unknown's avatar
      Fix up patch · c3babee8
      unknown authored
      
      sql-common/client.c:
        Remove the ssl_verify_server_cert will be added in separate patch
      vio/viossl.c:
        Fix coding standard
      vio/viosslfactories.c:
        Remove comment
      c3babee8
    • unknown's avatar
      Merge neptunus.(none):/home/msvensson/mysql/mysql-5.0 · 6af90061
      unknown authored
      into  neptunus.(none):/home/msvensson/mysql/bug17208/my50-bug17208
      
      
      sql/mysql_priv.h:
        Auto merged
      sql/mysqld.cc:
        Auto merged
      sql-common/client.c:
        Auto merged
      sql/sql_acl.cc:
        Auto merged
      6af90061
    • unknown's avatar
      Merge bk-internal:/home/bk/mysql-5.0 · 10633fd8
      unknown authored
      into  neptunus.(none):/home/msvensson/mysql/mysql-5.0
      
      
      10633fd8
  3. 11 Apr, 2006 10 commits
  4. 10 Apr, 2006 20 commits
  5. 09 Apr, 2006 4 commits
  6. 08 Apr, 2006 2 commits
    • unknown's avatar
      $MYSQL_TEST was broken with --valgrind. · 5a19f3bc
      unknown authored
      5a19f3bc
    • unknown's avatar
      Fixed bug #16069. · e536c8ec
      unknown authored
      The function agg_cmp_type in item_cmpfunc.cc neglected the fact that 
      the first argument in a BETWEEN/IN predicate could be a field of a view.
      As a result in the case when the retrieved table was hidden by a view 
      over it and the arguments in the BETWEEN/IN predicates are of 
      the date/time type the function did not perform conversion of 
      the constant arguments to the same format as the first field argument.
      If formats of the arguments differed it caused wrong a evaluation of
      the predicates.
      
      
      mysql-test/r/view.result:
        Added a test case for bug #16069.
      mysql-test/t/view.test:
        Added a test case for bug #16069.
      e536c8ec