SSL Certificate Subject ALT Names with IPs or DNS: not respected with --ssl-verify-server-cert

[Nickolay Ihalainen]

https://github.com/percona/percona-server/blob/5.6/sql-common/client.c#L1894-L1898

X509_VERIFY_PARAM_set1_host or X509_VERIFY_PARAM_add1_host or X509_check_host while checking common name.

Major issue happening with Aurora cluster:

"In order to connect to the cluster endpoint using SSL, your client connection utility must support Subject Alternative Names (SAN). If your client connection utility doesn't support SAN, you can connect directly to the instances in your Aurora DB cluster. For more information on Aurora endpoints, see Aurora Endpoints."
http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Aurora.Connect.html

Upstream bug:
https://bugs.mysql.com/bug.php?id=68052

[George Ormond Lorch III (gl-az)]

https://github.com/percona/percona-server/pull/1779
https://github.com/percona/percona-server/pull/1780
https://github.com/percona/percona-server/pull/1781

[Shahriyar Rzayev (rzayev-sehriyar)]

Percona now uses JIRA for bug reports so this bug report is migrated to: https://jira.percona.com/browse/PS-1076