Bug #80087 Generated SSL Wizard file names can be problematic

• Submitted: 21 Jan 2016 0:09
• Modified: 18 May 2016 23:05
• Reporter: Philip Olson
• Status: Closed
• Category: MySQL Workbench: Administration
• Severity: S3 (Non-critical)
• Version: 6.3.6
• OS: Windows
• CPU Architecture: Any

[21 Jan 2016 0:09] Philip Olson

Description:
This is more of a feature request, or might be a documentation problem, although it _could_ almost be a bug.

The workbench SSL Certificate wizard generates files. Some of these files begin with the letter "s", such as "server-cert.pem". This can be problematic, for example:

[mysqld]
"C:\path\to\certs\server-cert.pem"

This fails and emits an error as the \s is interpreted as a space by MySQL Server. So, instead of "server-cert.pem", the system ends up looking for " erver-cert.pem". 

 A workaround:

[mysqld]
"C:\path\to\certs\\server-cert.pem"

Note the \\s instead of \s.

How to repeat:
1. Open a connection
2. Execute the SSL wizard (note: openssl in your path is required)
3. Save the information provided by the wizard; it shows how to edit my.ini
4. Use the provided files, move all of them to somewhere like C:\path\to\certs\
5. Edit my.ini with the path from step #3, as described by the wizard. There are 6 lines to add.

Suggested fix:
I'm not sure, but renaming server-cert.pem and server-key.pem comes to mind. These names appear rather standard though, so perhaps a different solution is in order, such as having the SSL wizard display examples with \\s instead of \s in the path. 

Lastly, I'm not sure if there is something Windows specific here, but that's the system I tested this on.

[1 Feb 2016 9:27] MySQL Verification Team

Hello Philip,

Thank you for the report.

Thanks,
Umesh

[18 May 2016 23:05] Philip Olson

Posted by developer:
 
Fixed as of the upcoming MySQL Workbench 6.3.7 release, and here's the changelog entry:

All generated paths now will use "/" as the directory separator in order
to avoid the "\s" being interpreted as a space, such as
"C:\path\to\certs\server-cert.pem" for generated SSL certificates.

Thank you for the bug report.