Bug #44525 Upgrade Service Manager installer overwrites SSL certificate information

• Submitted: 28 Apr 2009 16:40
• Modified: 16 Mar 2010 9:36
• Reporter: Diego Medina
• Status: Closed
• Category: MySQL Enterprise Monitor: Installing
• Severity: S2 (Serious)
• Version: 2.0.5.7153
• OS: Any
• Assigned to: BitRock Merlin
• CPU Architecture: Any

[28 Apr 2009 16:40] Diego Medina

Description:
If a customer is using his own SSL certificate, they enter that information on the server.xml file. But running an upgrade installer overwrites that file.

How to repeat:
1- Install the service manager
2- Edit the server.xml file and add something like this

SSLCertificateFile="/home/mysql/enterprise/monitor/apache-tomcat/conf/tomcat.cert.pem"
SSLCertificateKeyFile="/home/mysql/enterprise/monitor/apache-tomcat/conf/tomcat.key.pem" 

to the     <Connector port="18443"  tag
3- run an upgrade installer
4- See that the settings are removed.

Suggested fix:
Keep the settings from server.xml, the same way we keep the ones on the my.cnf

[1 May 2009 21:39] Andy Bang

I believe the fix for this (as well as the related Bug #44444) is to just use (or copy over) the existing server.xml file, and only overwrite the things we ask for during installation (i.e. the 3 Tomcat ports as well as whether SSL is enabled or not).  As Mark has noted (in Bug #44444), you should be able to use XPath to get to the correct things.

[21 May 2009 15:30] BitRock Merlin

Patch sent to Keith.

[27 May 2009 15:16] Keith Russell

Patch installed in versions => 2.1.0.1050.

[29 May 2009 18:37] Marcos Palacios

Verified fixed in Monitor build 2.1.0.1050.

However, due to new bug http://bugs.mysql.com/bug.php?id=45198, it is recommended to re-test this fix after the 45198 bug is fixed.

[2 Jun 2009 16:44] Marcos Palacios

Verified still fixed in build 2.1.0.1053.

[25 Jun 2009 14:01] Tony Bedford

An entry was added to the 2.1.0 changelog:

If a customer was using their own SSL certificate, they entered that information in the server.xml file. However, running the upgrade installer caused server.xml to be replaced.

[12 Feb 2010 20:12] Andy Bang

See Bug #49386 (Enterprise Dashboard 2.0 to 2.1 gets certificate errors) for more information.

[16 Feb 2010 16:42] Enterprise Tools JIRA Robot

Keith Russell writes: 
Patch pushed to the 2.1 installer repository.

[16 Feb 2010 23:52] Enterprise Tools JIRA Robot

Keith Russell writes: 
Patch available in builds => 2.1.2.1151.

[15 Mar 2010 19:10] Enterprise Tools JIRA Robot

Diego Medina writes: 
Verified fixed on 2.1.2.1151

[16 Mar 2010 9:36] MC Brown

Updated the entry for the changelog to mention the removal of the associated certificates, and added to the 2.1.2 changelog.