mirror of
https://github.com/ansible-collections/community.mysql.git
synced 2025-04-12 21:50:32 -07:00
Fix REQUIRE SSL verification tests
This commit is contained in:
parent
a07c001bed
commit
35d8af579d
1 changed files with 16 additions and 12 deletions
|
@ -18,6 +18,15 @@
|
||||||
dest: /tmp/cert.pem
|
dest: /tmp/cert.pem
|
||||||
delegate_to: localhost
|
delegate_to: localhost
|
||||||
|
|
||||||
|
- name: get server version
|
||||||
|
mysql_info:
|
||||||
|
<<: *mysql_params
|
||||||
|
filter: version
|
||||||
|
register: db_version
|
||||||
|
|
||||||
|
- set_fact:
|
||||||
|
old_user_mgmt: "{{ db_version.version.major <= 5 and db_version.version.minor <= 6 or db_version.version.major == 10 and db_version.version.minor < 2 | bool }}"
|
||||||
|
|
||||||
- name: Drop mysql user if exists
|
- name: Drop mysql user if exists
|
||||||
mysql_user:
|
mysql_user:
|
||||||
<<: *mysql_params
|
<<: *mysql_params
|
||||||
|
@ -35,22 +44,17 @@
|
||||||
password: "{{ user_password_1 }}"
|
password: "{{ user_password_1 }}"
|
||||||
priv: '*.*:SELECT,CREATE USER,REQUIRESSL,GRANT'
|
priv: '*.*:SELECT,CREATE USER,REQUIRESSL,GRANT'
|
||||||
|
|
||||||
- name: attempt connection with newly created user not using TLS (expect access denied)
|
- name: verify REQUIRESSL is assigned to the user
|
||||||
mysql_user:
|
mysql_query:
|
||||||
name: "{{ user_name_2 }}"
|
<<: *mysql_params
|
||||||
password: "{{ user_password_2 }}"
|
query: "SHOW {{ what }} '{{ user_name_1}}'@'localhost'"
|
||||||
host: 127.0.0.1
|
|
||||||
login_user: '{{ user_name_1 }}'
|
|
||||||
login_password: '{{ user_password_1 }}'
|
|
||||||
login_host: 127.0.0.1
|
|
||||||
login_port: '{{ mysql_primary_port }}'
|
|
||||||
ignore_errors: yes
|
|
||||||
register: result
|
register: result
|
||||||
|
vars:
|
||||||
|
what: "{{ 'GRANTS FOR' if old_user_mgmt else 'CREATE USER' }}"
|
||||||
|
|
||||||
- assert:
|
- assert:
|
||||||
that:
|
that:
|
||||||
- result is failed and 'Access denied for user' in result.msg
|
- result is succeeded and 'REQUIRE SSL' in (result.query_result | string)
|
||||||
when: pymysql_version.stdout != "" # MySQLdb always uses SSL if possible
|
|
||||||
|
|
||||||
- name: create user with equivalent ssl requirement in tls_requires (expect unchanged)
|
- name: create user with equivalent ssl requirement in tls_requires (expect unchanged)
|
||||||
mysql_user:
|
mysql_user:
|
||||||
|
|
Loading…
Add table
Reference in a new issue