mirror of
https://github.com/MariaDB/server.git
synced 2025-07-25 16:39:52 +00:00
e580cf7ae0
PARSEC: Password Authentication using Response Signed with Elliptic Curve new authentication plugin that uses salted passwords, key derivation, extensible password storage format, and both server- and client-side scrambles. It signs the response with ed25519, but it uses stock unmodified ed25519 as provided by OpenSSL/WolfSSL/GnuTLS. Edited by: Sergei Golubchik
46 lines
1.4 KiB
Plaintext
46 lines
1.4 KiB
Plaintext
source include/platform.inc;
|
|
source include/not_embedded.inc;
|
|
|
|
if (!$AUTH_PARSEC_SO) {
|
|
skip No auth_parsec plugin;
|
|
}
|
|
if (!$PARSEC_SO) {
|
|
skip No auth_parsec plugin;
|
|
}
|
|
install soname 'auth_parsec';
|
|
--error ER_CANNOT_USER
|
|
create user test1@'%' identified via parsec using 'pwd';
|
|
create user test1@'%' identified via parsec using PASSWORD('pwd');
|
|
--replace_regex /:[A-Za-z0-9+\/]{43}'/:password'/ /:[A-Za-z0-9+\/]{24}:/:salt:/
|
|
show grants for test1@'%';
|
|
connect con1, localhost, test1, pwd;
|
|
select 1, USER(), CURRENT_USER();
|
|
disconnect con1;
|
|
connect con2, localhost, test1, pwd;
|
|
select 2, USER(), CURRENT_USER();
|
|
disconnect con2;
|
|
--replace_result $MASTER_MYSOCK MASTER_MYSOCK $MASTER_MYPORT MASTER_MYPORT
|
|
--error ER_ACCESS_DENIED_ERROR
|
|
connect con3, localhost, test1, wrong_pwd;
|
|
|
|
connection default;
|
|
|
|
create function have_ssl() returns char(3)
|
|
return (select if(variable_value > '','yes','no') as 'have_ssl'
|
|
from information_schema.session_status
|
|
where variable_name='ssl_cipher');
|
|
grant execute on test.* to test1@'%';
|
|
|
|
let host=;
|
|
if ($MTR_COMBINATION_WIN) {
|
|
# see ssl_autoverify.test
|
|
let host=--host=127.0.0.2;
|
|
}
|
|
|
|
--echo # mysql -utest1 -ppwd --ssl-verify-server-cert -e "select test.have_ssl()"
|
|
--exec $MYSQL --protocol tcp $host -utest1 -ppwd --ssl-verify-server-cert -e "select test.have_ssl()" 2>&1
|
|
|
|
drop function have_ssl;
|
|
drop user test1@'%';
|
|
uninstall soname 'auth_parsec';
|