308 Commits (1bc309bbf635347e558552eaafe39d84dc7b0960)

Author	SHA1	Message	Date
Javier Jaramago Fernández	1bc309bbf6	Fix buffer over-read on concurrent SHA2 auths ... During an full 'caching_sha2_password' auth, it's possible that the pass has been updated in 'GloMyAuth'. If this possibility is not taking into account buffer over-read could take place and valid auth attempts denied.	2 years ago
Javier Jaramago Fernández	ed3a5d7734	Add doc for 'switching_auth_type' in SHA2 full	2 years ago
Javier Jaramago Fernández	ab8af07c19	Add 'switching_auth_sent' to 'PROXYSQL INTERNAL SESSION' ... Improved observability for auth switch performed during authentication. The new field 'switching_auth_sent' is only updated when an actual auth switch requested to the client.	2 years ago
Javier Jaramago Fernández	3f2a7aa693	Fix memory issues during 'chaching_sha2' auth ... Auth 'caching_sha2_password' imposses and async flow on several previously sync functions. This new async flow needs to take into account the potential allocations for 'MySQL_Session' attributes and client connection userinfo.	2 years ago
Javier Jaramago Fernández	ce67a50cfc	Fix missing update for session 'clear_text_password' ... During first 'caching_sha2_password' login, 'clear_text_password' is unknown until authentication is completed. Info previously fetched from 'MySQL_Authentication' should be amended with the received password.	2 years ago
Javier Jaramago Fernández	bd7ab0d801	Fix empty passwords handling for 'caching_sha2_password'	2 years ago
René Cannaò	29b7cd0529	Modify generate_one_byte_pkt() ... Modified generate_one_byte_pkt() to prefix the data with 1 byte. This is the "equivalent" of what MySQL performs in wrap_plguin_data_into_proper_command() , prefixing the data with a command	2 years ago
René Cannaò	3c2418246c	Merge branch 'v2.x' into v2.x_sha2pass_draft3	2 years ago
René Cannaò	699fe7efcd	Moved proxysql_find_charset_* functions out of MySQL_Thread.cpp	2 years ago
Rahim Kanji	e1c489acb1	* If the backend server has CLIENT_DEPRECATE_EOF enabled, and the client does not support CLIENT_DEPRECATE_EOF, warning_count will be '0' in intermediate EOF packet. ... * Suppress the display of warning counts in the "SHOW WARNINGS" statement.	2 years ago
Rahim Kanji	dae3d669b9	* Setting 'warning_count' as soon as query is executed. ... * 'MySQL_Connection::warning_count' will be globally employed for managing multiplexing control and transmitting the warning count to the client * Fixed prepare statement bug: When preparing, if the digest matches, the result set is retrieved from the cache and sent to the client. Note: Currently using 'mysql_warning_count' to retrieve the warning count for prepared statement.	2 years ago
Rahim Kanji	743cd502a5	* Updated variable name from 'mysql-query_cache_with_warnings_support' to 'mysql-query_cache_handle_warnings' ... * Introduced global variable 'mysql-handle_warnings' to control warning support in ProxySQL * Included 'handling_warnings' flag in the 'mysql_hostgroup_attributes' table (hostgroup_settings). This flag holds top priority and can override the value of the global variable 'mysql_handle_warnings'.	2 years ago
Rahim Kanji	6b295477d6	Enhanced Warnings handling in ProxySQL: ... * Implemented 'SHOW WARNINGS' and 'SHOW COUNT(*) FROM WARNINGS' query handling. * When a query produces warnings, the warning count is now included in the query response. Additionally, a new variable 'mysql-query_cache_with_warnings_support' has been introduced for the query cache feature: * A value of '0' means that if a query execution produces warnings, the resultset will not be saved in the query cache. * A value of '1' indicates that if a query produces warnings, the resultset will be saved in the query cache, but the warning count in that resultset will be set to '0'. ** Note: * Warning handling is dependent on the query digest and 'mysql-query_digests' must be enabled for it to work. * Warnings saved in logfile ['mysql-log_mysql_warnings_enabled'] and the current feature can work in conjunction with each other.	2 years ago
René Cannaò	e3865be3a8	Minor changes in branches ... Also added few FIXME to review part of the code	3 years ago
René Cannaò	8106ae5ee3	Merge branch 'v2.x' into v2.x_sha2pass_draft3	3 years ago
René Cannaò	c8ad9c080e	Fixed memory not not initialized during handshake	3 years ago
Javier Jaramago Fernández	5a3f005655	Fix default collation in 'initial handshake' ('mysql-default_collation_connection') ... Collation selected via 'mysql-default_collation_connection' was incorrecly reported in 'initial handshake' via 'charset', thus reporting the default collate for that 'charset' instead of the chosen one.	3 years ago
René Cannaò	a593407f4d	Removing commented code used for POC	3 years ago
René Cannaò	08cc2f02fe	Fixed length of hash + salt	3 years ago
René Cannaò	7e5b3e8045	Rememeber clear text password if provided by client ... Extended account_details_t to also store clear_text_password if client provides it during a full authentication in caching_sha2_password . De facto, this implements the "caching" part of caching_sha2_password .	3 years ago
René Cannaò	cf6f4f765e	Working prototype of caching_sha2_password ... Now mysql_users.password can store the authentication_string as in MySQL's mysql.user table. Note: this commit also changes SALT_LEN_MAX in SHA-crypt code from 16 to 20 because MySQL caching_sha2_password uses 20 bytes salt	3 years ago
René Cannaò	e7745feef2	First implementation of caching_sha2_password ... Implementation not completed yet, but functional. It allows connections in which the user password is saved in clear password.	3 years ago
René Cannaò	29da662d56	enum proxysql_auth_plugins for mysql plugin ids ... Using `enum proxysql_auth_plugins` to define mysql authentication plugins. Also fixed few bugs introduced in previous commits.	3 years ago
René Cannaò	117b9d343b	caching_sha2_password automatically enables SSL	3 years ago
René Cannaò	76bb204f14	New variable mysql-default_authentication_plugin ... New MySQL variable default_authentication_plugin accepting two possible values: * mysql_native_password * caching_sha2_password	3 years ago
René Cannaò	094f77a30a	Temporary commit 01 for caching_sha2_password	3 years ago
René Cannaò	b9473aa93a	Deprecate SHA1_* also in this branch ... This branch has code where SHA1_ functions were still used.	3 years ago
René Cannaò	1fa074aa33	3rd refactoring of process_pkt_handshake_response ... Bug fixes	3 years ago
René Cannaò	5c40ee5096	Fix clickhouse compiling ... Previous commit (2nd refactoring of process_pkt_handshake_response) didn't compile with clickhouse	3 years ago
René Cannaò	d23b286af1	2nd refactoring of process_pkt_handshake_response	3 years ago
René Cannaò	5091edcf5e	Refactoring of process_pkt_handshake_response ... 1st commit for refactoring the authentication module	3 years ago
René Cannaò	2f016dd6d0	Merge pull request #4205 from sysown/v2.x-ssl3_warnings2 ... Fixes several compiler warnings - DO NOT MERGE	3 years ago
René Cannaò	65f7e20eae	Fixed mistake introduced in the previous commit	3 years ago
René Cannaò	d8a7e99bc3	Removed code deprecated in previous commit	3 years ago
René Cannaò	a31f83473d	Fix several warnings	3 years ago
René Cannaò	801e59c79e	First commit to remove OpenSSL3 deprecated functions	3 years ago
René Cannaò	c0745b42c2	Adding last_insert_id and last_gtid to MySQL_Logger	3 years ago
René Cannaò	c723eb9170	fast_forward can be enabled only on MySQL Session	3 years ago
Javier Jaramago Fernández	4e1ba8da31	Remove 'SERVER_SESSION_STATE_CHANGED' only when not GTID related #4023	3 years ago
Javier Jaramago Fernández	9c637db016	Merge branch 'v2.x' of github.com:sysown/proxysql into v2.x-4023	3 years ago
Javier Jaramago Fernández	a5e8ab045c	Refactor 'memcpy' into actual capability flags used during 'initial_handshake' #4023	3 years ago
Javier Jaramago Fernández	2bbeba1845	Fix forwarding of 'SERVER_SESSION_STATE_CHANGED' status to clients #4023 ... Right now server session state isn't tracked for backend connections, so we don't include this information in the generated OK packet. Because of this, we should never report of this status change to clients.	3 years ago
Javier Jaramago Fernández	07011da773	Fix heap overflow error during authentication when no password is provided	3 years ago
Javier Jaramago Fernández	f2eef47a2b	Fix several memory leaks during handshake when using 'MySQL_LDAP_Authentication'	3 years ago
Javier Jaramago Fernández	fab39850b1	Fix errors reported by valgrind due to uninitialized memory	3 years ago
Javier Jaramago Fernández	a5574233a1	Fix invalid removal of EOF packet for binary resultsets holding ERR packet	3 years ago
Javier Jaramago Fernández	c46a152a24	Merge branch 'v2.x' of github.com:sysown/proxysql into v2.x-ldap_fixes	4 years ago
René Cannaò	a0f603e77b	More code coverage for Clickhouse server ... Also it includes som minor bug fixes	4 years ago
Javier Jaramago Fernández	8affc8c17b	Fail when no 'backend_username' is found for the provided 'ldap_user'	4 years ago
René Cannaò	cbabdf6b7b	Merge pull request #3820 from sysown/v2.x-spiffe_regex_support ... Add regex support for 'spiffe_id' user attribute	4 years ago