Bug #70998 SSL certificate revocation list-related MTR tests fail on some platforms with -D

• Submitted: 25 Nov 2013 10:57
• Modified: 25 Nov 2013 19:34
• Reporter: Sergei Glushchenko (OCA)
• Status: Unsupported
• Category: MySQL Server
• Severity: S3 (Non-critical)
• Version: 5.6.14
• OS: Linux (CentOS 5, Debian 6, Ubuntu Lucid)
• CPU Architecture: Any
• Tags: openssl

[25 Nov 2013 10:57] Sergei Glushchenko

Description:
ssl_crl and ssl_crl_crlpath tests are fail with -DWITH_SSL=system
Following systems are affected:
- Ubuntu Lucid;
- Debian 6;
- CentOS 5.

How to repeat:
Build mysql with openssl 0.9.8e and run ssl_crl and ssl_crl_crlpath with MTR.

Suggested fix:
These versions of openssl expect CRL to be stored with the name fc725416.r0 instead of ab8a3803.r0. Copying the contents of ab8a3803.r0 with different name will solve the issue. The patch is:

=== added file 'mysql-test/std_data/crldir/fc725416.r0'
--- mysql-test/std_data/crldir/fc725416.r0	1970-01-01 00:00:00 +0000
+++ mysql-test/std_data/crldir/fc725416.r0	2013-11-07 06:34:31 +0000
@@ -0,0 +1,10 @@
+-----BEGIN X509 CRL-----
+MIIBXjCByAIBATANBgkqhkiG9w0BAQUFADBoMQswCQYDVQQGEwJCRzEQMA4GA1UE
+CBMHUGxvdmRpdjEPMA0GA1UEChMGT3JhY2xlMQ4wDAYDVQQLEwVNeVNRTDEmMCQG
+A1UEAxMdTXlTUUwgQ1JMIHRlc3QgQ0EgY2VydGlmaWNhdGUXDTEyMDUyMTE0NDEx
+NFoXDTIyMDUxOTE0NDExNFowHDAaAgkA+eLzmA4rBX8XDTEyMDUxNzE1Mjc1OVqg
+DjAMMAoGA1UdFAQDAgECMA0GCSqGSIb3DQEBBQUAA4GBAIEYWLAI+mGt21DVlg/t
+mGaQ629aabNhZL3An5+2z+tqzQbOv6bKMW5H8gNNeNrRqQR/XEJvhlg0BrxfIicM
+GbvVoud0HmECIoxNVmeI8UCNPkkeQONT+8ZW029iuJF2KgGI0m1ZJa3bjRaArian
+ag9dgLE4zLppD4aMal0ysHPZ
+-----END X509 CRL-----

[25 Nov 2013 19:34] Sveta Smirnova

Thank you for the report.

Please read at http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-7.html: "When MySQL is configured with -DWITH_SSL=system to build with OpenSSL, CMake now produces an error if OpenSSL is older than version 1.0.1 (Bug #14167227)"

Configuration you use is not supported. More over, not modified CMakeLists.txt won't allow to build MySQL with OpenSSL 0.9.8e