324 Commits (27923c19c8819e37cf8a39de503c71bf907851cb)

Author	SHA1	Message	Date
Javier Jaramago Fernández	4304b995a3	Improve debug message with context dump (passwords) during auth handshake ... This message is dump with each call to 'process_pkt_handshake_response' printing the updated context. When the verbosity value for module 'debug_mysql_protocol' is >= 5, the stored and client supplied passwords will be dumped in HEX format, for values < 5, the passwords will be masked.	4 months ago
Javier Jaramago Fernández	f7c5756328	Fix losing database info on first logging for 'caching_sha2_password' ... The database specified in 'HandshakeResponse' was lost on the first logging when 'caching_sha2_password'. In this case a full-authentication was required, and this was the trigger for the context loss.	10 months ago
René Cannaò	ba95ad2382	In get_password() replaced a proxy_info() with proxy_debug()	11 months ago
Rahim Kanji	216b435463	Enshuring ProxySQL's stability when subjected to malformed packets	1 year ago
Rahim Kanji	967386d7d3	Added the SESSION_FORWARD_TYPE enum to define the type of session forwarding	1 year ago
Rahim Kanji	f99e806861	Fixed compilation error for all TEST* configurations	1 year ago
René Cannaò	cbf4628ea3	Merge remote-tracking branch 'proxysql27/v2.7' into v2.x_postgres_merge27_20240917	1 year ago
Javier Jaramago Fernández	ff8d8b1125	Fix invalid read-after-free for 'account_details.attributes' ... This ownership model needs to be revisited. After transferring the ownership of an 'account_details_t' field, it should be nullified.	1 year ago
Javier Jaramago Fernández	bbda0a86eb	Add initial impl for dual-password support	2 years ago
Javier Jaramago Fernández	851a8850bc	Fix regression on 'COM_CHANGE_USER' for 'mysql_native_password' - Closes #4589 ... Fixes handing of 'COM_CHANGE_USER' for 'mysql_native_password' when using hashed user passwords.	2 years ago
Javier Jaramago Fernández	8a93882d1d	Fix assert on COM_CHANGE_USER with hashed pass for 'caching_sha2_password' ... For now, we always reply with an auth failure until 'Auth Switch Support' is added for 'caching_sha2_password'.	2 years ago
Miro Stauder	b7258e965f	use local includes - openssl	2 years ago
Miro Stauder	7695c42534	use local include - openssl	2 years ago
René Cannaò	fde8ace076	Removed json.hpp from include files ... This seems to speedup compile time, and also lead to smaller binary	2 years ago
René Cannaò	dad6f0f344	Split of MySQL_Protocol.cpp into multiple files	2 years ago
Javier Jaramago Fernández	6c5bd0971c	Add new SQLite3 functions for password generation ... Added new functions 'MYSQL_NATIVE_PASSWORD' and 'CACHING_SHA2_PASSWORD' for generating MySQL compatible hashed passwords.	2 years ago
Javier Jaramago Fernández	1bc309bbf6	Fix buffer over-read on concurrent SHA2 auths ... During an full 'caching_sha2_password' auth, it's possible that the pass has been updated in 'GloMyAuth'. If this possibility is not taking into account buffer over-read could take place and valid auth attempts denied.	2 years ago
Javier Jaramago Fernández	ed3a5d7734	Add doc for 'switching_auth_type' in SHA2 full	2 years ago
Javier Jaramago Fernández	ab8af07c19	Add 'switching_auth_sent' to 'PROXYSQL INTERNAL SESSION' ... Improved observability for auth switch performed during authentication. The new field 'switching_auth_sent' is only updated when an actual auth switch requested to the client.	2 years ago
Javier Jaramago Fernández	3f2a7aa693	Fix memory issues during 'chaching_sha2' auth ... Auth 'caching_sha2_password' imposses and async flow on several previously sync functions. This new async flow needs to take into account the potential allocations for 'MySQL_Session' attributes and client connection userinfo.	2 years ago
Javier Jaramago Fernández	ce67a50cfc	Fix missing update for session 'clear_text_password' ... During first 'caching_sha2_password' login, 'clear_text_password' is unknown until authentication is completed. Info previously fetched from 'MySQL_Authentication' should be amended with the received password.	2 years ago
Javier Jaramago Fernández	bd7ab0d801	Fix empty passwords handling for 'caching_sha2_password'	2 years ago
René Cannaò	29b7cd0529	Modify generate_one_byte_pkt() ... Modified generate_one_byte_pkt() to prefix the data with 1 byte. This is the "equivalent" of what MySQL performs in wrap_plguin_data_into_proper_command() , prefixing the data with a command	2 years ago
René Cannaò	3c2418246c	Merge branch 'v2.x' into v2.x_sha2pass_draft3	2 years ago
René Cannaò	699fe7efcd	Moved proxysql_find_charset_* functions out of MySQL_Thread.cpp	2 years ago
Rahim Kanji	e1c489acb1	* If the backend server has CLIENT_DEPRECATE_EOF enabled, and the client does not support CLIENT_DEPRECATE_EOF, warning_count will be '0' in intermediate EOF packet. ... * Suppress the display of warning counts in the "SHOW WARNINGS" statement.	2 years ago
Rahim Kanji	dae3d669b9	* Setting 'warning_count' as soon as query is executed. ... * 'MySQL_Connection::warning_count' will be globally employed for managing multiplexing control and transmitting the warning count to the client * Fixed prepare statement bug: When preparing, if the digest matches, the result set is retrieved from the cache and sent to the client. Note: Currently using 'mysql_warning_count' to retrieve the warning count for prepared statement.	2 years ago
Rahim Kanji	743cd502a5	* Updated variable name from 'mysql-query_cache_with_warnings_support' to 'mysql-query_cache_handle_warnings' ... * Introduced global variable 'mysql-handle_warnings' to control warning support in ProxySQL * Included 'handling_warnings' flag in the 'mysql_hostgroup_attributes' table (hostgroup_settings). This flag holds top priority and can override the value of the global variable 'mysql_handle_warnings'.	2 years ago
Rahim Kanji	6b295477d6	Enhanced Warnings handling in ProxySQL: ... * Implemented 'SHOW WARNINGS' and 'SHOW COUNT(*) FROM WARNINGS' query handling. * When a query produces warnings, the warning count is now included in the query response. Additionally, a new variable 'mysql-query_cache_with_warnings_support' has been introduced for the query cache feature: * A value of '0' means that if a query execution produces warnings, the resultset will not be saved in the query cache. * A value of '1' indicates that if a query produces warnings, the resultset will be saved in the query cache, but the warning count in that resultset will be set to '0'. ** Note: * Warning handling is dependent on the query digest and 'mysql-query_digests' must be enabled for it to work. * Warnings saved in logfile ['mysql-log_mysql_warnings_enabled'] and the current feature can work in conjunction with each other.	2 years ago
René Cannaò	e3865be3a8	Minor changes in branches ... Also added few FIXME to review part of the code	3 years ago
René Cannaò	8106ae5ee3	Merge branch 'v2.x' into v2.x_sha2pass_draft3	3 years ago
René Cannaò	c8ad9c080e	Fixed memory not not initialized during handshake	3 years ago
Javier Jaramago Fernández	5a3f005655	Fix default collation in 'initial handshake' ('mysql-default_collation_connection') ... Collation selected via 'mysql-default_collation_connection' was incorrecly reported in 'initial handshake' via 'charset', thus reporting the default collate for that 'charset' instead of the chosen one.	3 years ago
René Cannaò	a593407f4d	Removing commented code used for POC	3 years ago
René Cannaò	08cc2f02fe	Fixed length of hash + salt	3 years ago
René Cannaò	7e5b3e8045	Rememeber clear text password if provided by client ... Extended account_details_t to also store clear_text_password if client provides it during a full authentication in caching_sha2_password . De facto, this implements the "caching" part of caching_sha2_password .	3 years ago
René Cannaò	cf6f4f765e	Working prototype of caching_sha2_password ... Now mysql_users.password can store the authentication_string as in MySQL's mysql.user table. Note: this commit also changes SALT_LEN_MAX in SHA-crypt code from 16 to 20 because MySQL caching_sha2_password uses 20 bytes salt	3 years ago
René Cannaò	e7745feef2	First implementation of caching_sha2_password ... Implementation not completed yet, but functional. It allows connections in which the user password is saved in clear password.	3 years ago
René Cannaò	29da662d56	enum proxysql_auth_plugins for mysql plugin ids ... Using `enum proxysql_auth_plugins` to define mysql authentication plugins. Also fixed few bugs introduced in previous commits.	3 years ago
René Cannaò	117b9d343b	caching_sha2_password automatically enables SSL	3 years ago
René Cannaò	76bb204f14	New variable mysql-default_authentication_plugin ... New MySQL variable default_authentication_plugin accepting two possible values: * mysql_native_password * caching_sha2_password	3 years ago
René Cannaò	094f77a30a	Temporary commit 01 for caching_sha2_password	3 years ago
René Cannaò	b9473aa93a	Deprecate SHA1_* also in this branch ... This branch has code where SHA1_ functions were still used.	3 years ago
René Cannaò	1fa074aa33	3rd refactoring of process_pkt_handshake_response ... Bug fixes	3 years ago
René Cannaò	5c40ee5096	Fix clickhouse compiling ... Previous commit (2nd refactoring of process_pkt_handshake_response) didn't compile with clickhouse	3 years ago
René Cannaò	d23b286af1	2nd refactoring of process_pkt_handshake_response	3 years ago
René Cannaò	5091edcf5e	Refactoring of process_pkt_handshake_response ... 1st commit for refactoring the authentication module	3 years ago
René Cannaò	2f016dd6d0	Merge pull request #4205 from sysown/v2.x-ssl3_warnings2 ... Fixes several compiler warnings - DO NOT MERGE	3 years ago
René Cannaò	65f7e20eae	Fixed mistake introduced in the previous commit	3 years ago
René Cannaò	d8a7e99bc3	Removed code deprecated in previous commit	3 years ago