Bug #90782 Contribution by Facebook: Update SET @@global.ssl=1 behaviour to refresh SS ...
Submitted: 7 May 2018 15:17 Modified: 3 Apr 2019 20:22
Reporter: FBContrib Admin Email Updates:
Status: Duplicate Impact on me:
None 
Category:MySQL Server: Security: Encryption Severity:S3 (Non-critical)
Version:8.0.4 OS:Any
Assigned to: CPU Architecture:Any

[7 May 2018 15:17] FBContrib Admin 
Description:
Background innformation provided by Facebook:
Abstract:
Update the behavior of "SET @global.ssl = 1;" so that when SSL is already set up, and we set the variable to 1, we refresh the SSL certificate if we fail to refresh the SSL cert, we stick with the existing one.

Repo: https://github.com/mysql/mysql-server
Patch on top of 8.0.4: https://github.com/mysql/mysql-server/commit/577fbcf856cd693434d554545d499559bcdd3695
Facebook commits: https://github.com/facebook/mysql-5.6/commit/450b6ee

How to repeat:
See description

Suggested fix:
See contribution code attached
[7 May 2018 15:17] FBContrib Admin 
Update SET @@global.ssl=1 behaviour to refresh SSL certificate 
(*) This code is contributed under the Facebook agreement

Contribution: fb_patch_52.txt (text/plain), 26.69 KiB.
[3 Apr 2019 20:22] Omer Barnir 
Thanks to Facebook for submitting this contribution. 
We implement this feature in 8.0.16 as described in wl#11541 (not using the attached code)