[misc] add ssl

Author: rusher

.github/workflows/ci.yml

@@ -95,6 +95,7 @@ jobs:
         env:
           LOCAL_DB: ${{ steps.mariadb-install.outputs.database-type }}
           DB_TYPE: ${{ matrix.db-type }}
+          TEST_DB_SERVER_CERT: "./.github/workflows/certs/server.crt"
 
       - name: Download Codecov uploader
         shell: bash

.github/workflows/generate-certs.sh

@@ -1,5 +1,8 @@
 #!/bin/bash
 
+# // SPDX-License-Identifier: LGPL-2.1-or-later
+# // Copyright (c) 2015-2025 MariaDB Corporation Ab
+
 # Script to generate self-signed certificates for testing
 # CN: mariadb.example.com
 
@@ -13,16 +16,47 @@ mkdir -p certs
 echo "Generate CA private key"
 openssl genrsa 2048 > certs/ca.key
 
+echo "[ req ]" > certs/ca.conf
+echo "prompt                 = no" > certs/ca.conf
+echo "distinguished_name     = req_distinguished_name" > certs/ca.conf
+echo "[ req_distinguished_name ]" > certs/ca.conf
+echo "countryName            = FR" > certs/ca.conf
+echo "stateOrProvinceName    = Loire-atlantique" > certs/ca.conf
+echo "localityName           = Nantes" > certs/ca.conf
+echo "organizationName       = Home" > certs/ca.conf
+echo "organizationalUnitName = Lab" > certs/ca.conf
+echo "commonName             = mariadb.example.com" > certs/ca.conf
+echo "emailAddress           = admin@mariadb.example.com" > certs/ca.conf
+
 echo "Generate CA certificate (self-signed)"
-openssl req -days 365 -new -x509 -nodes -key certs/ca.key -out certs/ca.crt -subj "/C=US/ST=Test/L=Test/O=Test/CN=mariadb.example.com"
+openssl req -days 365 -new -x509 -nodes -key certs/ca.key -out certs/ca.crt --config ca.conf
+
+
+
+echo "[ req ]" > certs/server.conf
+echo "prompt                 = no" >> certs/server.conf
+echo "distinguished_name     = req_distinguished_name" >> certs/server.conf
+echo "req_extensions         = req_ext" >> certs/server.conf
+echo "" >> certs/server.conf
+echo "[ req_distinguished_name ]" >> certs/server.conf
+echo "countryName            = FR" >> certs/server.conf
+echo "stateOrProvinceName    = Normandie" >> certs/server.conf
+echo "localityName           = Caen" >> certs/server.conf
+echo "organizationName       = Home" >> certs/server.conf
+echo "organizationalUnitName = Lab" >> certs/server.conf
+echo "commonName             = mariadb.example.com" >> certs/server.conf
+echo "emailAddress           = admin@mariadb.example.com" >> certs/server.conf
+echo "" >> certs/server.conf
+echo "[ req_ext ]" >> certs/server.conf
+echo "subjectAltName = DNS: mariadb.example.com, IP: 127.0.0.1" >> certs/server.conf
 
 
 echo "Generating private key..."
-openssl req -newkey rsa:2048 -nodes -keyout certs/server.key -out certs/server.csr
+openssl req -newkey rsa:2048 -nodes -keyout certs/server.key -out certs/server.csr --config server.conf
 
 
 echo "Generate the certificate for the server:"
-openssl x509 -req -days 365 -in server.csr -out certs/server.crt -CA certs/ca.crt -CAkey certs/ca.key -extensions req_ext  -subj "/C=US/ST=Test/L=Test/O=Test/CN=mariadb.example.com"
+openssl x509 -req -days 365 -in server.csr -out certs/server.crt -CA certs/ca.crt -CAkey certs/ca.key -extensions req_ext -extfile server.conf
 
 # Set appropriate permissions
 chmod 600 certs/ca.key certs/server.key