MINI MINI MANI MO

--source include/not_embedded.inc
--source include/have_sha256_rsa_auth.inc
# Save the initial number of concurrent sessions
--source include/count_sessions.inc


#------------------------------------------------------------------------------


--echo # Global Setup
call mtr.add_suppression("Failed to setup SSL");
call mtr.add_suppression("SSL error: SSL_CTX_set_default_verify_paths failed");
let DATADIR_LOCATION=$MYSQLTEST_VARDIR/mysqld.1/data;
let server_log= $MYSQLTEST_VARDIR/log/mysqld.1.err;
let CERTDIR_LOCATION=$MYSQLTEST_VARDIR/tmp/certs;
let CADIR_LOCATION=$MYSQLTEST_VARDIR/tmp/certs/cacerts;

--error 0, 1
--rmdir $CADIR_LOCATION
--error 0, 1
--rmdir $CERTDIR_LOCATION

--mkdir $CERTDIR_LOCATION
--copy_file std_data/server-cert.pem $CERTDIR_LOCATION/server-cert.pem
--copy_file std_data/server-key.pem $CERTDIR_LOCATION/server-key.pem

--mkdir $CADIR_LOCATION
--copy_file std_data/cacert.pem $CADIR_LOCATION/ca.pem
--copy_file std_data/untrusted-cacert.pem $CADIR_LOCATION/ca2.pem

let SEARCH_FILE= $server_log;


#------------------------------------------------------------------------------


--echo # Case 1 : Check that all certificates in --ssl-capath are processed.

let $restart_file= $MYSQLTEST_VARDIR/tmp/mysqld.1.expect;
--exec echo "wait" > $restart_file
--shutdown_server 10
--source include/wait_until_disconnected.inc

perl;
my $filetodelete = "$ENV{'MYSQLTEST_VARDIR'}/log/mysqld.1.err";
while (-e $filetodelete) {
  unlink $filetodelete;
  sleep 1;
}
EOF

--exec echo "restart: --ssl-capath=$CADIR_LOCATION --ssl-ca=$CADIR_LOCATION/ca.pem --ssl-cert=$CERTDIR_LOCATION/server-cert.pem --ssl-key=$CERTDIR_LOCATION/server-key.pem" > $MYSQLTEST_VARDIR/tmp/mysqld.1.expect
--enable_reconnect
--source include/wait_until_connected_again.inc
--disable_reconnect
--echo # Restart completed.

--echo # Search for : CA certificate *ca.pem is self signed.
let SEARCH_PATTERN= CA certificate .*ca.pem is self signed.;
--source include/search_pattern_in_file.inc
--echo # Search for : CA certificate *ca2.pem is self signed.
let SEARCH_PATTERN= CA certificate .*ca2.pem is self signed.;
--source include/search_pattern_in_file.inc

#------------------------------------------------------------------------------


--echo # Global Cleanup
--remove_file $CADIR_LOCATION/ca.pem
--remove_file $CADIR_LOCATION/ca2.pem
--rmdir $CADIR_LOCATION
--remove_file $CERTDIR_LOCATION/server-cert.pem
--remove_file $CERTDIR_LOCATION/server-key.pem
--rmdir $CERTDIR_LOCATION

# Wait till all disconnects are completed
--source include/wait_until_count_sessions.inc

--source include/force_restart.inc

#------------------------------------------------------------------------------