# Want to skip this test from daily Valgrind execution
--source include/no_valgrind_without_big.inc

# This test should work in embedded server after we fix mysqltest
-- source include/not_embedded.inc

# Save the initial number of concurrent sessions
--source include/count_sessions.inc

--echo #
--echo # WL#7712 Support SSL by default in libmysql
--echo #


--echo # verify that mysql default connect with ssl channel when using TCP/IP
--echo # connection
--replace_result ECDHE-RSA-AES128-GCM-SHA256 SSL_CIPHER DHE-RSA-AES128-GCM-SHA256 SSL_CIPHER DHE-RSA-AES256-SHA SSL_CIPHER
--exec $MYSQL --host=127.0.0.1 -P $MASTER_MYPORT -e "SHOW STATUS like 'Ssl_cipher'"

--echo # verify that mysql --ssl=0 connect with unencrypted channel
--replace_result ECDHE-RSA-AES128-GCM-SHA256 SSL_CIPHER DHE-RSA-AES128-GCM-SHA256 SSL_CIPHER DHE-RSA-AES256-SHA SSL_CIPHER
--exec $MYSQL --host=127.0.0.1 -P $MASTER_MYPORT -e "SHOW STATUS like 'Ssl_cipher'" --ssl-mode=DISABLED

--echo # verify that mysql --ssl=1 connect with ssl channel
--replace_result ECDHE-RSA-AES128-GCM-SHA256 SSL_CIPHER DHE-RSA-AES128-GCM-SHA256 SSL_CIPHER DHE-RSA-AES256-SHA SSL_CIPHER
--exec $MYSQL --host=127.0.0.1 -P $MASTER_MYPORT -e "SHOW STATUS like 'Ssl_cipher'" --ssl-mode=REQUIRED

CREATE USER u1@localhost IDENTIFIED BY 'secret' REQUIRE SSL;
--echo # verify that mysqladmin default connect with ssl channel
--exec $MYSQLADMIN -uu1 -psecret --host=127.0.0.1 -P $MASTER_MYPORT ping 2>&1

--echo # verify that mysql_show default connect with ssl channel
--exec $MYSQL_SHOW -uu1 -psecret --host=127.0.0.1 -P $MASTER_MYPORT 2>&1

DROP USER u1@localhost;

# Wait till all disconnects are completed
--source include/wait_until_count_sessions.inc

##  This test file is for testing encrypted communication only, not other
##  encryption routines that the SSL library happens to provide!