--source include/no_valgrind_without_big.inc
# Turn on ssl between the client and server
# and run a number of tests

--source include/have_ssl_communication.inc
# Slow test, don't run during staging part
--source include/not_staging.inc

--source include/default_charset.inc
--source include/have_perfschema.inc
--disable_service_connection

let $default_id=`select thread_id from performance_schema.threads where processlist_id=connection_id()`;

connect (ssl_con,localhost,root,,,,,SSL);

let $ssl_con_id=`select thread_id from performance_schema.threads where processlist_id=connection_id()`;
evalp select variable_name from performance_schema.status_by_thread where VARIABLE_NAME LIKE 'Ssl%' and thread_id in($default_id, $ssl_con_id);

# Check ssl turned on
SELECT (VARIABLE_VALUE <> '') AS have_ssl FROM INFORMATION_SCHEMA.SESSION_STATUS WHERE VARIABLE_NAME='Ssl_cipher';

# Check ssl expiration
SHOW STATUS LIKE 'Ssl_server_not_before';
SHOW STATUS LIKE 'Ssl_server_not_after';

# Source select test case
-- source include/common-tests.inc

# Check ssl turned on
SELECT (VARIABLE_VALUE <> '') AS have_ssl FROM INFORMATION_SCHEMA.SESSION_STATUS WHERE VARIABLE_NAME='Ssl_cipher';

--echo #
--echo # MDEV-7697 Client reports ERROR 2006 (MySQL server has gone away) or ERROR 2013 (Lost connection to server during query) while executing AES* functions under SSL
--echo #
select aes_decrypt('MySQL','adf');
select 'still connected?';

--echo #
--echo # MDEV-35581 On servers linked against WolfSSL SSL_Cipher and SSL_cipher_list are always the same
--echo #
select variable_value like '%:%' from information_schema.session_status where variable_name='ssl_cipher_list';

connection default;
disconnect ssl_con;
